A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernel-livepatch-5.10.205-195.807Upgrade kernel-livepatch-5.15.145-95.161Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools | Jan 23, 2024 | Jan 2, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.72-96.166Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernelUpgrade perf-debuginfo | Feb 17, 2025 | Jan 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelists | Mar 13, 2024 | Jan 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | May 31, 2024 | Jan 2, 2024 |
| Oracle_linux | — | Upgrade kernel | Mar 19, 2024 | Jan 2, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Feb 29, 2024 | Jan 2, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-azureUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-azure-vdso | Oct 31, 2024 | Jan 2, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeop-5.15Upgrade linux-image-awsUpgrade linux-image-6.5.0-15-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.2.0-1019-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-azure-cvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-92-generic-64kUpgrade linux-image-6.5.0-1011-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1052-awsUpgrade linux-image-6.5.0-1014-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-1013-oemUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1049-gcpUpgrade linux-image-5.15.0-1049-kvmUpgrade linux-image-5.15.0-92-lowlatency-64kUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.15.0-1047-intel-iotgUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-1015-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-15-genericUpgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-laptop-23.10Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-92-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-raspiUpgrade linux-image-6.5.0-1012-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1049-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1050-oracleUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1045-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-gkeUpgrade linux-image-6.1.0-1029-oemUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1045-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1035-gkeopUpgrade linux-image-nvidia-6.2Upgrade linux-image-ibmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-1018-awsUpgrade linux-image-5.15.0-92-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-5.15.0-92-genericUpgrade linux-image-gke-5.15Upgrade linux-image-intelUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-5.15.0-1048-intel-iotgUpgrade linux-image-6.2.0-1019-azure-fdeUpgrade linux-image-5.15.0-1043-nvidia-lowlatencyUpgrade linux-image-6.5.0-1011-gcpUpgrade linux-image-6.5.0-1006-starfiveUpgrade linux-image-6.5.0-1009-raspiUpgrade linux-image-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1054-azureUpgrade linux-image-5.15.0-1043-nvidiaUpgrade linux-image-6.5.0-15-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1008-laptopUpgrade linux-image-6.2.0-1015-nvidia-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-intel-iotgUpgrade linux-image-6.5.0-1011-azureUpgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-6.2.0-1021-gcpUpgrade linux-image-6.5.0-15-lowlatency | Jan 26, 2024 | Jan 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub