A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.
We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-64k-debug-modulesUpgrade kernel-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-64k-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-64kUpgrade bpftoolUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-64k-debug-devel-matchedUpgrade rtlaUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernelUpgrade kernel-modulesUpgrade kernel-64k-debugUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-devel | Sep 15, 2023 | Jul 21, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.120-74.144Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-5.10.184-175.749Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade python-perf | Aug 8, 2023 | Jul 21, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.38-59.109Upgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-devel | Feb 17, 2025 | Jul 21, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-284_11_1-debugsourceUpgrade kpatch-patch-5_14_0-284_11_1Upgrade kernelUpgrade kpatch-patch-5_14_0-284_11_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-5_14_0-284_25_1Upgrade kpatch-patch-5_14_0-284_18_1-debugsourceUpgrade kpatch-patch-5_14_0-284_25_1-debugsourceUpgrade kpatch-patch-5_14_0-284_25_1-debuginfoUpgrade kpatch-patch-5_14_0-284_18_1-debuginfoUpgrade kpatch-patch-5_14_0-284_18_1 | Sep 13, 2023 | Jul 21, 2023 |
| Debian | — | Upgrade linux | Jul 31, 2023 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Jan 10, 2024 | Jul 21, 2023 |
| Oracle_linux | — | Upgrade kernel | Sep 15, 2023 | Jul 21, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 13, 2023 | Jul 21, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-core | Mar 5, 2024 | Jul 21, 2023 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-xilinxUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-armUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-broadcomUpgrade dlm-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade kernel-debugUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-source-rtUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-rt-livepatch-develUpgrade kernel-develUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade kernel-syms-azureUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade dtb-amazonUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-64kbUpgrade kernel-rt_debug-develUpgrade kernel-symsUpgrade dtb-caviumUpgrade kernel-rt-livepatchUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-devel-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade dtb-lgUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdump | Sep 15, 2023 | Jul 21, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-1010-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1040-gcpUpgrade linux-image-6.2.0-1011-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-82-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-intelUpgrade linux-image-5.15.0-1041-oracleUpgrade linux-image-5.15.0-1040-kvmUpgrade linux-image-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.2.0-1010-oracleUpgrade linux-image-5.15.0-1040-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.0.0-1021-oemUpgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-82-genericUpgrade linux-image-5.15.0-1026-gkeopUpgrade linux-image-5.15.0-82-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.2.0-1008-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-82-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1031-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.15.0-1043-awsUpgrade linux-image-6.2.0-1011-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1031-nvidiaUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-6.2.0-1011-lowlatencyUpgrade linux-image-5.15.0-1036-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1038-intel-iotgUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1045-azureUpgrade linux-image-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-31-genericUpgrade linux-image-6.2.0-31-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-6.2.0-1003-starfiveUpgrade linux-image-5.15.0-1036-raspiUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.2.0-31-generic-64kUpgrade linux-image-oracleUpgrade linux-image-6.2.0-1012-gcpUpgrade linux-image-6.2.0-1011-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-82-generic-lpaeUpgrade linux-image-6.2.0-1010-azure | Aug 14, 2023 | Jul 21, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 21, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub