A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-after-free.
We recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade perfUpgrade kernel-tools-libs-devel | Feb 23, 2024 | Dec 18, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.145-95.156Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.201-191.748Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.201-191.748-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.10.205-194.804Upgrade perfUpgrade kernel-livepatch-5.15.145-94.156Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-livepatch-5.10.205-195.804Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64 | Jan 10, 2024 | Dec 18, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-libbpfUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.72-96.166Upgrade python3-perf | Feb 17, 2025 | Dec 18, 2023 |
| Debian | — | Upgrade linux | Jan 8, 2024 | Dec 18, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf | Mar 13, 2024 | Dec 18, 2023 |
| Oracle_linux | — | Upgrade kernel | Feb 23, 2024 | Dec 18, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Feb 8, 2024 | Dec 18, 2023 |
| Suse | — | Upgrade kernel-debugUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-develUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade kernel-kvmsmallUpgrade kernel-default-baseUpgrade dtb-alteraUpgrade kernel-symsUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade dtb-marvellUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-renesasUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade dtb-amdUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kselftests-kmp-rtUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-debug-livepatch-develUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade kernel-preempt-develUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-preemptUpgrade kernel-obs-build | Mar 13, 2024 | Dec 18, 2023 |
| Ubuntu | — | Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.5.0-15-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1013-oemUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.5.0-1011-azure-fdeUpgrade linux-image-5.15.0-92-generic-lpaeUpgrade linux-image-6.5.0-1012-awsUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1049-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1049-gcpUpgrade linux-image-5.15.0-92-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-6.5.0-1014-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-1011-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1047-intel-iotgUpgrade linux-image-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1045-raspiUpgrade linux-image-5.15.0-1052-awsUpgrade linux-image-gkeUpgrade linux-image-5.15.0-92-lowlatencyUpgrade linux-image-5.15.0-92-lowlatency-64kUpgrade linux-image-6.2.0-1015-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-15-generic-64kUpgrade linux-image-starfiveUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-6.5.0-15-lowlatencyUpgrade linux-image-5.15.0-92-genericUpgrade linux-image-generic-64kUpgrade linux-image-6.2.0-1019-azureUpgrade linux-image-5.15.0-1054-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-1009-raspiUpgrade linux-image-5.15.0-1043-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1035-gkeopUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-1018-awsUpgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-genericUpgrade linux-image-5.15.0-1043-nvidiaUpgrade linux-image-5.15.0-1045-ibmUpgrade linux-image-6.5.0-1011-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1049-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-5.15.0-1048-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1008-laptopUpgrade linux-image-6.5.0-1006-starfiveUpgrade linux-image-6.2.0-1015-nvidia-64kUpgrade linux-image-6.2.0-1021-gcpUpgrade linux-image-6.2.0-1019-azure-fdeUpgrade linux-image-nvidia-6.2Upgrade linux-image-6.1.0-1029-oemUpgrade linux-image-5.15.0-1050-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-15-generic | Jan 26, 2024 | Dec 18, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 18, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub