A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The function nft_trans_gc_catchall did not remove the catchall set element from the catchall_list when the argument sync is true, making it possible to free a catchall set element many times.
We recommend upgrading past commit 93995bf4af2c5a99e2a87f0cd5ce547d31eb7630.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-livepatch-5.15.139-93.147Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade perf | Dec 5, 2023 | Nov 14, 2023 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.59-84.139Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.66-91.160Upgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-livepatch-6.1.61-85.141Upgrade kernel-livepatch-6.1.56-82.125Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Nov 14, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 14, 2023 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 15, 2024 | Nov 14, 2023 |
| Ubuntu | — | Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.1.0-1028-oemUpgrade linux-image-oem-22.04b | Jan 11, 2024 | Nov 14, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub