A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.
We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-debugUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rtUpgrade kernel-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64kUpgrade python3-perfUpgrade perfUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade rtlaUpgrade kernel-64k-debug-coreUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-64k-modules-extraUpgrade kernel-debug-develUpgrade kernel-64k-develUpgrade kernel-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-develUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules | Sep 15, 2023 | Jul 21, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.10.184-175.749Upgrade python-perfUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.120-74.144Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-tools | Aug 8, 2023 | Jul 21, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.38-59.109Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-libbpf-staticUpgrade perfUpgrade bpftoolUpgrade python3-perfUpgrade python3-perf-debuginfo | Feb 17, 2025 | Jul 21, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-284_25_1-debuginfoUpgrade kpatch-patch-5_14_0-284_18_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-5_14_0-284_18_1Upgrade kpatch-patch-5_14_0-284_18_1-debuginfoUpgrade kpatch-patch-5_14_0-284_25_1-debugsourceUpgrade kpatch-patch-5_14_0-284_25_1Upgrade kpatch-patch-5_14_0-284_11_1Upgrade kernelUpgrade kpatch-patch-5_14_0-284_11_1-debugsourceUpgrade kpatch-patch-5_14_0-284_11_1-debuginfo | Sep 13, 2023 | Jul 21, 2023 |
| Debian | — | Upgrade linux | Jul 31, 2023 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jan 10, 2024 | Jul 21, 2023 |
| Oracle_linux | — | Upgrade kernel | Sep 15, 2023 | Jul 21, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 13, 2023 | Jul 21, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extra | Mar 5, 2024 | Jul 21, 2023 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade kernel-develUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade dtb-sprdUpgrade kselftests-kmp-azureUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade dtb-armUpgrade kernel-debugUpgrade kernel-rt-extraUpgrade kernel-syms-rtUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-xilinxUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-amazonUpgrade kernel-rt-livepatchUpgrade dtb-caviumUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-rt-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade dtb-lgUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade kernel-rt-optional | Sep 15, 2023 | Jul 21, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-1010-oracleUpgrade linux-image-azureUpgrade linux-image-6.2.0-1011-raspiUpgrade linux-image-5.15.0-82-genericUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-5.15.0-1040-kvmUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-6.2.0-1008-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.2.0-1010-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1026-gkeopUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-82-lowlatency-64kUpgrade linux-image-5.15.0-1040-gkeUpgrade linux-image-raspiUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1040-gcpUpgrade linux-image-5.15.0-1041-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-82-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-genericUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-82-generic-64kUpgrade linux-image-5.15.0-1031-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.2.0-1010-azureUpgrade linux-image-6.2.0-1011-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-82-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1031-nvidiaUpgrade linux-image-5.15.0-1036-ibmUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1011-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.2.0-1003-starfiveUpgrade linux-image-6.2.0-1012-gcpUpgrade linux-image-5.15.0-1036-raspiUpgrade linux-image-6.2.0-31-generic-lpaeUpgrade linux-image-6.2.0-31-genericUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-6.1.0-1019-oemUpgrade linux-image-5.15.0-1045-azureUpgrade linux-image-5.15.0-1043-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-1011-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.2.0-31-generic-64kUpgrade linux-image-5.15.0-1038-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency | Aug 14, 2023 | Jul 21, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 21, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub