A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.205-195.807Upgrade bpftool-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.145-95.161Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-devel | Jan 23, 2024 | Jan 2, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-livepatch-6.1.72-96.166Upgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfo | Feb 17, 2025 | Jan 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelists | Mar 13, 2024 | Jan 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | May 31, 2024 | Jan 2, 2024 |
| Oracle_linux | — | Upgrade kernel | Mar 19, 2024 | Jan 2, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Feb 29, 2024 | Jan 2, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-azure-extraUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-64kb-extraUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-develUpgrade kernel-azureUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-devel-azure | Oct 31, 2024 | Jan 2, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1052-awsUpgrade linux-image-6.2.0-1015-nvidiaUpgrade linux-image-5.15.0-92-lowlatency-64kUpgrade linux-image-6.5.0-1011-azure-fdeUpgrade linux-image-6.5.0-15-generic-64kUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.15.0-1047-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-92-generic-64kUpgrade linux-image-5.15.0-92-lowlatencyUpgrade linux-image-6.5.0-1013-oemUpgrade linux-image-awsUpgrade linux-image-5.15.0-1049-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-6.2.0-1019-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1014-oracleUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1049-gcpUpgrade linux-image-gcpUpgrade linux-image-laptop-23.10Upgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-15-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1006-starfiveUpgrade linux-image-intelUpgrade linux-image-6.5.0-1009-raspiUpgrade linux-image-6.5.0-1011-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1050-oracleUpgrade linux-image-5.15.0-1048-intel-iotgUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1043-nvidia-lowlatencyUpgrade linux-image-6.2.0-1019-azure-fdeUpgrade linux-image-starfiveUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-6.2.0-1018-awsUpgrade linux-image-5.15.0-1045-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-15-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1043-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-1011-azureUpgrade linux-image-6.2.0-1015-nvidia-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-92-genericUpgrade linux-image-gkeUpgrade linux-image-6.5.0-1008-laptopUpgrade linux-image-oem-22.04Upgrade linux-image-6.1.0-1029-oemUpgrade linux-image-5.15.0-92-generic-lpaeUpgrade linux-image-nvidia-6.2Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1045-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1035-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-6.5.0-1012-awsUpgrade linux-image-6.5.0-15-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.2.0-1021-gcpUpgrade linux-image-5.15.0-1054-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1049-gkeUpgrade linux-image-gkeop | Jan 26, 2024 | Jan 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub