A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-after-free.
We recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdumpUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-cross-headers | Feb 23, 2024 | Dec 18, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-livepatch-5.15.145-95.156Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.201-191.748-debuginfoUpgrade kernel-livepatch-5.10.205-194.804Upgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.201-191.748Upgrade kernel-livepatch-5.10.205-195.804Upgrade kernel-livepatch-5.15.145-94.156Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Jan 10, 2024 | Dec 18, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-modules-extraUpgrade bpftoolUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.72-96.166Upgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extra-common | Feb 17, 2025 | Dec 18, 2023 |
| Debian | — | Upgrade linux | Jan 8, 2024 | Dec 18, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelists | Mar 13, 2024 | Dec 18, 2023 |
| Oracle_linux | — | Upgrade kernel | Feb 23, 2024 | Dec 18, 2023 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Feb 8, 2024 | Dec 18, 2023 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-preemptUpgrade kselftests-kmp-defaultUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade kernel-default-optionalUpgrade dtb-qcomUpgrade kernel-preempt-develUpgrade kernel-rt-develUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade kernel-azureUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rtUpgrade dtb-renesasUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade kernel-kvmsmallUpgrade kernel-default-baseUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-broadcomUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-develUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debugUpgrade kernel-64kbUpgrade dtb-lgUpgrade reiserfs-kmp-rtUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug | Mar 13, 2024 | Dec 18, 2023 |
| Ubuntu | — | Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-1009-raspiUpgrade linux-image-intelUpgrade linux-image-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1035-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.2.0-1018-awsUpgrade linux-image-6.5.0-1011-gcpUpgrade linux-image-6.2.0-1019-azure-fdeUpgrade linux-image-5.15.0-1048-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.2.0-1021-gcpUpgrade linux-image-6.5.0-1006-starfiveUpgrade linux-image-5.15.0-1043-nvidiaUpgrade linux-image-starfiveUpgrade linux-image-6.2.0-1019-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-1008-laptopUpgrade linux-image-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1054-azureUpgrade linux-image-5.15.0-1045-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1049-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1050-oracleUpgrade linux-image-6.2.0-1015-nvidia-64kUpgrade linux-image-nvidia-6.2Upgrade linux-image-raspiUpgrade linux-image-6.5.0-15-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-92-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1043-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.5.0-15-genericUpgrade linux-image-6.5.0-15-generic-64kUpgrade linux-image-6.1.0-1029-oemUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-92-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-6.5.0-1014-oracleUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-15-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-92-generic-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1049-kvmUpgrade linux-image-5.15.0-92-lowlatency-64kUpgrade linux-image-5.15.0-92-generic-lpaeUpgrade linux-image-6.5.0-1013-oemUpgrade linux-image-5.15.0-1049-gcpUpgrade linux-image-6.5.0-1011-azureUpgrade linux-image-azure-cvmUpgrade linux-image-6.5.0-1012-awsUpgrade linux-image-5.15.0-1052-awsUpgrade linux-image-6.2.0-1015-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1047-intel-iotgUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.15.0-1045-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.5.0-1011-azure-fde | Jan 26, 2024 | Dec 18, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 18, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub