A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-coreUpgrade kernel-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-64k-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-modulesUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-headersUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rtUpgrade rtlaUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-debug-modules-coreUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade kernel-64kUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-64k-develUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade bpftoolUpgrade perfUpgrade kernel-64k-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-debug-uki-virt | Sep 15, 2023 | Jul 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.128-80.144Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.186-179.751-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.186-179.751Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64 | Sep 7, 2023 | Jul 31, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-libbpf-static | Feb 17, 2025 | Jul 19, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-477_15_1-debugsourceUpgrade kpatch-patch-5_14_0-284_25_1-debugsourceUpgrade kpatch-patch-5_14_0-284_25_1Upgrade kpatch-patch-5_14_0-284_18_1Upgrade kpatch-patch-4_18_0-477_10_1-debugsourceUpgrade kpatch-patch-4_18_0-477_13_1-debugsourceUpgrade kpatch-patch-5_14_0-284_25_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-477_21_1Upgrade kpatch-patch-4_18_0-477_10_1Upgrade kpatch-patch-5_14_0-284_11_1-debugsourceUpgrade kpatch-patch-5_14_0-284_11_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1-debuginfoUpgrade kpatch-patch-5_14_0-284_18_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1Upgrade kpatch-patch-4_18_0-477_15_1-debuginfoUpgrade kpatch-patch-4_18_0-477_10_1-debuginfoUpgrade kernelUpgrade kpatch-patch-5_14_0-284_18_1-debugsourceUpgrade kpatch-patch-5_14_0-284_11_1Upgrade kpatch-patch-4_18_0-477_15_1Upgrade kpatch-patch-4_18_0-477_21_1-debuginfoUpgrade kpatch-patch-4_18_0-477_21_1-debugsource | Sep 13, 2023 | Jul 31, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Jul 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Jul 31, 2023 |
| Oracle_linux | — | Upgrade kernel | Sep 15, 2023 | Jul 19, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 13, 2023 | Jul 31, 2023 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-extra | Mar 5, 2024 | Jul 31, 2023 |
| Suse | — | Upgrade dtb-renesasUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade kernel-symsUpgrade dtb-amazonUpgrade kernel-rt-livepatchUpgrade dlm-kmp-azureUpgrade dtb-alUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-amlogicUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-xilinxUpgrade kernel-devel-azureUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-default-extraUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade kernel-debug-develUpgrade dtb-mediatekUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-azureUpgrade kernel-source-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade dtb-alteraUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade kernel-preempt-develUpgrade kernel-rt-optionalUpgrade kernel-preemptUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-defaultUpgrade dtb-zteUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade kernel-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade dtb-caviumUpgrade kernel-azure-extraUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-source-vanilla | Aug 15, 2023 | Jul 31, 2023 |
| Ubuntu | — | Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1031-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-starfiveUpgrade linux-image-6.2.0-1008-ibmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.2.0-31-generic-64kUpgrade linux-image-6.2.0-1010-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1045-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1043-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.1.0-1020-oemUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1036-raspiUpgrade linux-image-5.15.0-82-genericUpgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-6.2.0-31-genericUpgrade linux-image-kvmUpgrade linux-image-6.2.0-1011-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1031-nvidiaUpgrade linux-image-5.15.0-82-lowlatency-64kUpgrade linux-image-6.2.0-1003-starfiveUpgrade linux-image-5.15.0-82-generic-lpaeUpgrade linux-image-5.15.0-1026-gkeopUpgrade linux-image-6.2.0-31-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1041-oracleUpgrade linux-image-intelUpgrade linux-image-6.2.0-1012-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-azureUpgrade linux-image-5.15.0-1038-intel-iotgUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.2.0-1010-oracleUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-82-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1040-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-1011-raspiUpgrade linux-image-ibmUpgrade linux-image-6.2.0-1011-lowlatencyUpgrade linux-image-6.2.0-1011-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1040-kvmUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1036-ibmUpgrade linux-image-5.15.0-1040-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-6.2.0-1010-awsUpgrade linux-image-5.15.0-82-generic-64kUpgrade linux-image-generic | Aug 31, 2023 | Jul 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub