A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
Addition and removal of rules from chain bindings within the same transaction causes leads to use-after-free.
We recommend upgrading past commit f15f29fd4779be8a418b66e9d52979bb6d6c2325.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.197-186.748Upgrade kernel-livepatch-5.10.192-183.736Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.134-87.145Upgrade kernel-develUpgrade bpftoolUpgrade python-perfUpgrade kernel-livepatch-5.10.192-182.736-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-livepatch-5.10.192-183.736-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.196-185.743Upgrade kernel-livepatch-5.10.196-185.743-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfo | Oct 18, 2023 | Sep 27, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.52-71.125Upgrade kernel-livepatch-6.1.56-82.125Upgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-6.1.49-70.116Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-debuginfoUpgrade python3-perf | Feb 17, 2025 | Sep 27, 2023 |
| Debian | — | Upgrade linux | Jan 8, 2024 | Sep 27, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Jan 10, 2024 | Sep 27, 2023 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 14, 2023 | Sep 27, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 27, 2023 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-renesasUpgrade kernel-azureUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-docsUpgrade dtb-freescaleUpgrade reiserfs-kmp-defaultUpgrade dtb-amazonUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debugUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade kernel-symsUpgrade kernel-debug-develUpgrade dtb-amdUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade kernel-macrosUpgrade dtb-allwinnerUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade kernel-develUpgrade kernel-azure-develUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade kernel-rtUpgrade dtb-armUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade gfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-azure-livepatch-develUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade kernel-default-extra | Mar 13, 2024 | Sep 27, 2023 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.1.0-1024-oemUpgrade linux-image-6.5.0-1008-gcpUpgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-87-genericUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-starfiveUpgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-5.15.0-1048-awsUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1006-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-genericUpgrade linux-image-laptop-23.10Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-1011-oracleUpgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-nvidia-6.2Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-6.5.0-10-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-1009-awsUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.5.0-1008-azure-fdeUpgrade linux-image-6.5.0-10-lowlatencyUpgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-ibmUpgrade linux-image-6.2.0-1015-azureUpgrade linux-image-5.15.0-1050-azureUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1008-azureUpgrade linux-image-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-6.5.0-1005-laptopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-1007-oemUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-6.5.0-10-genericUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-6.5.0-1003-starfiveUpgrade linux-image-6.2.0-35-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-6.5.0-10-lowlatency-64kUpgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-awsUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-azure-cvm | Oct 23, 2023 | Sep 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 26, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub