A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-after-free.
We recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel | Feb 23, 2024 | Dec 18, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.145-95.156Upgrade perf-debuginfoUpgrade kernel-livepatch-5.10.201-191.748-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.205-194.804Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.201-191.748Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.145-94.156Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.205-195.804Upgrade bpftool | Jan 10, 2024 | Dec 18, 2023 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.72-96.166Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-libbpfUpgrade python3-perf | Feb 17, 2025 | Dec 18, 2023 |
| Debian | — | Upgrade linux | Jan 8, 2024 | Dec 18, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Mar 13, 2024 | Dec 18, 2023 |
| Oracle_linux | — | Upgrade kernel | Feb 23, 2024 | Dec 18, 2023 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Feb 8, 2024 | Dec 18, 2023 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-armUpgrade kernel-debug-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-amlogicUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-rt-develUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade kernel-syms-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade kernel-preemptUpgrade dtb-exynosUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-caviumUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kernel-develUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade gfs2-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade kernel-default-baseUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-renesasUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade gfs2-kmp-rtUpgrade dtb-marvell | Mar 13, 2024 | Dec 18, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1049-gkeUpgrade linux-image-starfiveUpgrade linux-image-6.2.0-1019-azureUpgrade linux-image-6.5.0-15-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.2.0-1018-awsUpgrade linux-image-5.15.0-1045-ibmUpgrade linux-image-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1048-intel-iotgUpgrade linux-image-6.2.0-1015-nvidia-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1054-azureUpgrade linux-image-5.15.0-1050-oracleUpgrade linux-image-6.5.0-1006-starfiveUpgrade linux-image-6.5.0-1011-gcpUpgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-intel-iotgUpgrade linux-image-6.1.0-1029-oemUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeopUpgrade linux-image-6.2.0-1019-azure-fdeUpgrade linux-image-6.5.0-15-genericUpgrade linux-image-6.2.0-1021-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-15-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1043-nvidiaUpgrade linux-image-6.5.0-1008-laptopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-92-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1009-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1043-nvidia-lowlatencyUpgrade linux-image-5.15.0-1035-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-5.15.0-1049-kvmUpgrade linux-image-5.15.0-1045-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-15-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-92-generic-lpaeUpgrade linux-image-5.15.0-92-generic-64kUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.5.0-1011-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1049-gcpUpgrade linux-image-6.5.0-1013-oemUpgrade linux-image-6.5.0-1012-awsUpgrade linux-image-6.5.0-1011-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.2.0-1015-nvidiaUpgrade linux-image-5.15.0-1052-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-5.15.0-92-lowlatencyUpgrade linux-image-6.5.0-1014-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1047-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-92-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-cvm | Jan 26, 2024 | Dec 18, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 18, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub