A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The nft_setelem_catchall_deactivate() function checks whether the catch-all set element is active in the current generation instead of the next generation before freeing it, but only flags it inactive in the next generation, making it possible to free the element multiple times, leading to a double free vulnerability.
We recommend upgrading past commit b1db244ffd041a49ecc9618e8feb6b5c1afcdaa7.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-modules-coreUpgrade python3-perfUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade libperfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-64k-develUpgrade kernel-64k-modulesUpgrade kernel-headersUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-devel-matchedUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-docUpgrade kernel-64k-coreUpgrade kernelUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-64kUpgrade perfUpgrade rvUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debugUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-develUpgrade bpftoolUpgrade kernel-tools | Nov 4, 2024 | Jan 31, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-livepatch-5.15.148-97.158Upgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade python-perf-debuginfo | Feb 21, 2024 | Jan 31, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-6.1.75-99.163Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-headers | Feb 17, 2025 | Jan 31, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 31, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 12, 2024 | Jan 31, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Feb 29, 2024 | Jan 31, 2024 |
| Suse | — | Upgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade dtb-nvidiaUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade dtb-renesasUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade kernel-symsUpgrade dtb-apmUpgrade dtb-amdUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade ocfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade kernel-source-azureUpgrade kernel-rtUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kernel-azure-optionalUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade kernel-debug-develUpgrade kernel-rt-livepatchUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade dtb-lgUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch | Feb 15, 2024 | Jan 31, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1054-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1053-gkeUpgrade linux-image-starfiveUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1059-azureUpgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-101-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-1010-starfiveUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1056-awsUpgrade linux-image-5.15.0-1054-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-26-genericUpgrade linux-image-6.5.0-1017-azure-fdeUpgrade linux-image-5.15.0-1047-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1012-laptopUpgrade linux-image-5.15.0-101-generic-64kUpgrade linux-image-6.5.0-26-generic-64kUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-6.5.0-1017-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-1018-oemUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1059-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1013-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1053-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1049-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-gkeopUpgrade linux-image-intelUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1047-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-101-lowlatency-64kUpgrade linux-image-6.5.0-26-lowlatency-64kUpgrade linux-image-6.5.0-1016-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1049-ibmUpgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-101-generic-lpaeUpgrade linux-image-6.5.0-26-lowlatencyUpgrade linux-image-6.5.0-1019-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-101-genericUpgrade linux-image-5.15.0-1039-gkeopUpgrade linux-image-6.5.0-1019-oracle-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1051-intel-iotgUpgrade linux-image-6.5.0-1016-gcpUpgrade linux-image-oracle | Mar 12, 2024 | Jan 31, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 31, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub