A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
Addition and removal of rules from chain bindings within the same transaction causes leads to use-after-free.
We recommend upgrading past commit f15f29fd4779be8a418b66e9d52979bb6d6c2325.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-5.10.192-183.736-debuginfoUpgrade kernel-livepatch-5.10.196-185.743Upgrade kernel-livepatch-5.15.134-87.145Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.196-185.743-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.192-182.736-debuginfoUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-livepatch-5.10.197-186.748Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.192-183.736Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headers | Oct 18, 2023 | Sep 27, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-6.1.49-70.116Upgrade python3-perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade perfUpgrade kernel-livepatch-6.1.55-75.123Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.56-82.125Upgrade kernel-livepatch-6.1.52-71.125Upgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfo | Feb 17, 2025 | Sep 27, 2023 |
| Debian | — | Upgrade linux | Jan 8, 2024 | Sep 27, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Jan 10, 2024 | Sep 27, 2023 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 14, 2023 | Sep 27, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 27, 2023 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-64kbUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-source-rtUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-amazonUpgrade kernel-rt_debugUpgrade cluster-md-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-symsUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-debug-develUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-kvmsmall-develUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade dtb-alteraUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade kernel-default-extraUpgrade gfs2-kmp-azure | Mar 13, 2024 | Sep 27, 2023 |
| Ubuntu | — | Upgrade linux-image-laptop-23.10Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.5.0-1006-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-ibmUpgrade linux-image-6.2.0-1015-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-5.15.0-1048-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-10-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-nvidiaUpgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1008-azureUpgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1009-awsUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-6.5.0-1008-gcpUpgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-kvmUpgrade linux-image-6.5.0-10-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1050-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-nvidia-6.2Upgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-6.1.0-1024-oemUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1011-oracleUpgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.5.0-1008-azure-fdeUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.5.0-1003-starfiveUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1007-oemUpgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1005-laptopUpgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-6.5.0-10-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-6.2.0-35-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-6.5.0-10-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-intel-iotg | Oct 23, 2023 | Sep 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 26, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub