A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-after-free.
We recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-debug-core | Feb 23, 2024 | Dec 18, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.205-195.804Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-livepatch-5.15.145-94.156Upgrade python-perfUpgrade bpftoolUpgrade kernel-livepatch-5.15.145-95.156Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.201-191.748Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.205-194.804Upgrade kernel-livepatch-5.10.201-191.748-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo | Jan 10, 2024 | Dec 18, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.72-96.166Upgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-static | Feb 17, 2025 | Dec 18, 2023 |
| Debian | — | Upgrade linux | Jan 8, 2024 | Dec 18, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Mar 13, 2024 | Dec 18, 2023 |
| Oracle_linux | — | Upgrade kernel | Feb 23, 2024 | Dec 18, 2023 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Feb 8, 2024 | Dec 18, 2023 |
| Suse | — | Upgrade kernel-syms-rtUpgrade kernel-develUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-amazonUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-lgUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-amdUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-default-baseUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade kernel-obs-qaUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-preempt-develUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-azure-develUpgrade cluster-md-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-rt-livepatchUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-preemptUpgrade kselftests-kmp-defaultUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade kernel-docsUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade dtb-qcom | Mar 13, 2024 | Dec 18, 2023 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-intelUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.2.0-1018-awsUpgrade linux-image-genericUpgrade linux-image-6.5.0-1011-gcpUpgrade linux-image-5.15.0-1048-intel-iotgUpgrade linux-image-6.2.0-1019-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.5.0-15-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-1021-gcpUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-1006-starfiveUpgrade linux-image-6.5.0-1008-laptopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1045-ibmUpgrade linux-image-5.15.0-1050-oracleUpgrade linux-image-5.15.0-1049-gkeUpgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1054-azureUpgrade linux-image-6.5.0-15-genericUpgrade linux-image-6.1.0-1029-oemUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.2.0-1015-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1035-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-15-generic-64kUpgrade linux-image-6.2.0-1019-azureUpgrade linux-image-6.5.0-1009-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1043-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-92-genericUpgrade linux-image-raspiUpgrade linux-image-starfiveUpgrade linux-image-nvidia-6.2Upgrade linux-image-5.15.0-1043-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1049-kvmUpgrade linux-image-5.15.0-1052-awsUpgrade linux-image-6.5.0-1011-azureUpgrade linux-image-6.5.0-1012-awsUpgrade linux-image-6.5.0-1011-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1014-oracleUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-gkeUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1047-intel-iotgUpgrade linux-image-5.15.0-1049-gcpUpgrade linux-image-6.2.0-1015-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-laptop-23.10Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-92-generic-64kUpgrade linux-image-6.5.0-1013-oemUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1045-raspiUpgrade linux-image-5.15.0-92-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-kvmUpgrade linux-image-6.5.0-15-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-92-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-92-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04 | Jan 26, 2024 | Dec 18, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 18, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub