A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-after-free.
We recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade bpftoolUpgrade perfUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump | Feb 23, 2024 | Dec 18, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.201-191.748Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-livepatch-5.10.201-191.748-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.145-95.156Upgrade kernel-develUpgrade kernel-livepatch-5.10.205-194.804Upgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python-perfUpgrade kernel-livepatch-5.10.205-195.804Upgrade kernel-livepatch-5.15.145-94.156Upgrade kernel-tools | Jan 10, 2024 | Dec 18, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.72-96.166Upgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-develUpgrade python3-perf | Feb 17, 2025 | Dec 18, 2023 |
| Debian | — | Upgrade linux | Jan 8, 2024 | Dec 18, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Mar 13, 2024 | Dec 18, 2023 |
| Oracle_linux | — | Upgrade kernel | Feb 23, 2024 | Dec 18, 2023 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Feb 8, 2024 | Dec 18, 2023 |
| Suse | — | Upgrade kernel-azureUpgrade kernel-rt-develUpgrade cluster-md-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade kernel-docsUpgrade kernel-preempt-develUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-preemptUpgrade dtb-amlogicUpgrade gfs2-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-mediatekUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-devel-rtUpgrade kernel-rt-extraUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade kselftests-kmp-rtUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-debug-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-develUpgrade dtb-marvellUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-azure-optionalUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-docs-html | Mar 13, 2024 | Dec 18, 2023 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-92-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-92-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-92-generic-lpaeUpgrade linux-image-6.5.0-1012-awsUpgrade linux-image-6.2.0-1015-nvidiaUpgrade linux-image-6.5.0-1013-oemUpgrade linux-image-6.5.0-1011-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1047-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1052-awsUpgrade linux-image-oem-20.04Upgrade linux-image-6.5.0-1011-azure-fdeUpgrade linux-image-5.15.0-1045-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1049-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1049-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-92-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-15-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1014-oracleUpgrade linux-image-laptop-23.10Upgrade linux-image-oracleUpgrade linux-image-ibmUpgrade linux-image-intelUpgrade linux-image-azureUpgrade linux-image-5.15.0-1035-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1049-gkeUpgrade linux-image-5.15.0-1045-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-intel-iotgUpgrade linux-image-starfiveUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1043-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1006-starfiveUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-1008-laptopUpgrade linux-image-6.2.0-1021-gcpUpgrade linux-image-6.2.0-1019-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.2.0-1015-nvidia-64kUpgrade linux-image-gkeopUpgrade linux-image-6.5.0-15-generic-64kUpgrade linux-image-5.15.0-92-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-15-lowlatencyUpgrade linux-image-5.15.0-1043-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.2.0-1019-azureUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.1.0-1029-oemUpgrade linux-image-5.15.0-1050-oracleUpgrade linux-image-5.15.0-1054-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-15-genericUpgrade linux-image-nvidia-6.2Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-1011-gcpUpgrade linux-image-6.2.0-1018-awsUpgrade linux-image-5.15.0-1048-intel-iotgUpgrade linux-image-6.5.0-1009-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04cUpgrade linux-image-generic | Jan 26, 2024 | Dec 18, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 18, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub