A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-modules-coreUpgrade kernel-toolsUpgrade kernel-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-docUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade rtlaUpgrade kernel-debug-develUpgrade perfUpgrade kernel-64k-debug-develUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-64kUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-64k-develUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade kernel-debugUpgrade kernel-modules-extra | Sep 15, 2023 | Jul 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-5.15.128-80.144Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.186-179.751-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel | Sep 7, 2023 | Jul 31, 2023 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo | Feb 17, 2025 | Jul 19, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kpatch-patch-5_14_0-284_25_1-debugsourceUpgrade kpatch-patch-4_18_0-477_13_1-debugsourceUpgrade kpatch-patch-5_14_0-284_18_1Upgrade kpatch-patch-4_18_0-477_21_1Upgrade kpatch-patch-5_14_0-284_25_1-debuginfoUpgrade kpatch-patch-5_14_0-284_25_1Upgrade kpatch-patch-4_18_0-477_10_1-debugsourceUpgrade kpatch-patch-4_18_0-477_15_1-debugsourceUpgrade kpatch-patch-4_18_0-477_10_1-debuginfoUpgrade kpatch-patch-4_18_0-477_15_1-debuginfoUpgrade kpatch-patch-5_14_0-284_18_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1-debuginfoUpgrade kpatch-patch-4_18_0-477_10_1Upgrade kpatch-patch-5_14_0-284_18_1-debugsourceUpgrade kpatch-patch-5_14_0-284_11_1-debugsourceUpgrade kpatch-patch-5_14_0-284_11_1Upgrade kpatch-patch-4_18_0-477_15_1Upgrade kernelUpgrade kpatch-patch-4_18_0-477_13_1Upgrade kpatch-patch-4_18_0-477_21_1-debugsourceUpgrade kpatch-patch-4_18_0-477_21_1-debuginfo | Sep 13, 2023 | Jul 31, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Jul 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Jan 10, 2024 | Jul 31, 2023 |
| Oracle_linux | — | Upgrade kernel | Sep 15, 2023 | Jul 19, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 13, 2023 | Jul 31, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-extra | Mar 5, 2024 | Jul 31, 2023 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade dtb-allwinnerUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade dtb-alteraUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade kernel-preemptUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade dtb-zteUpgrade kernel-debug-vdsoUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade dtb-lgUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-preempt-develUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade kselftests-kmp-defaultUpgrade dtb-amazonUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-azureUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade kernel-default-extraUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-develUpgrade dtb-alUpgrade kernel-default-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade kernel-64kb-livepatch-develUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade gfs2-kmp-default | Aug 15, 2023 | Jul 31, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-1010-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-6.2.0-1011-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-6.2.0-1010-awsUpgrade linux-image-intelUpgrade linux-image-6.2.0-1012-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-82-generic-64kUpgrade linux-image-5.15.0-1038-intel-iotgUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-82-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-1011-kvmUpgrade linux-image-gkeUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1040-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1036-ibmUpgrade linux-image-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1040-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1040-gkeUpgrade linux-image-6.2.0-1011-lowlatencyUpgrade linux-image-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1031-nvidia-lowlatencyUpgrade linux-image-5.15.0-1026-gkeopUpgrade linux-image-5.15.0-1043-awsUpgrade linux-image-5.15.0-1031-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1036-raspiUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-6.1.0-1020-oemUpgrade linux-image-oracleUpgrade linux-image-6.2.0-31-generic-64kUpgrade linux-image-6.2.0-31-genericUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1041-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-82-lowlatency-64kUpgrade linux-image-5.15.0-1045-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-1011-lowlatency-64kUpgrade linux-image-6.2.0-1003-starfiveUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.2.0-1008-ibmUpgrade linux-image-5.15.0-82-genericUpgrade linux-image-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.2.0-1010-azureUpgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-oem-20.04dUpgrade linux-image-kvmUpgrade linux-image-6.2.0-31-generic-lpaeUpgrade linux-image-5.15.0-82-generic-lpaeUpgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-oem-22.04b | Aug 31, 2023 | Jul 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub