A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The nft_setelem_catchall_deactivate() function checks whether the catch-all set element is active in the current generation instead of the next generation before freeing it, but only flags it inactive in the next generation, making it possible to free the element multiple times, leading to a double free vulnerability.
We recommend upgrading past commit b1db244ffd041a49ecc9618e8feb6b5c1afcdaa7.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-uki-virtUpgrade kernel-cross-headersUpgrade kernel-64k-coreUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade libperfUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules-coreUpgrade rtlaUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-64kUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debugUpgrade rvUpgrade kernel-rt-develUpgrade perf | Nov 4, 2024 | Jan 31, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.15.148-97.158 | Feb 21, 2024 | Jan 31, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-6.1.75-99.163Upgrade kernel-toolsUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Jan 31, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 31, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 12, 2024 | Jan 31, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Feb 29, 2024 | Jan 31, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade dlm-kmp-64kbUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatchUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade kernel-zfcpdumpUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade kernel-rt-optionalUpgrade dtb-appleUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-default-livepatchUpgrade kernel-rt-extraUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-source-azureUpgrade dtb-qcomUpgrade kernel-sourceUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-64kbUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-default-optionalUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade dtb-armUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade kernel-azure-develUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-rt_debugUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-rt-develUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade dtb-apmUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatek | Feb 15, 2024 | Jan 31, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-26-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-awsUpgrade linux-image-intel-iotgUpgrade linux-image-6.5.0-1019-oracle-64kUpgrade linux-image-5.15.0-1039-gkeopUpgrade linux-image-5.15.0-1047-nvidiaUpgrade linux-image-laptop-23.10Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1049-ibmUpgrade linux-image-5.15.0-1049-raspiUpgrade linux-image-5.15.0-1059-azure-fdeUpgrade linux-image-5.15.0-101-genericUpgrade linux-image-5.15.0-101-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-26-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-gkeUpgrade linux-image-6.5.0-1016-awsUpgrade linux-image-5.15.0-101-generic-lpaeUpgrade linux-image-6.5.0-1013-raspiUpgrade linux-image-5.15.0-1051-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-6.5.0-1019-oracleUpgrade linux-image-5.15.0-1053-kvmUpgrade linux-image-6.5.0-1016-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1018-oemUpgrade linux-image-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-genericUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1056-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1047-nvidia-lowlatencyUpgrade linux-image-6.5.0-26-genericUpgrade linux-image-5.15.0-1054-gcpUpgrade linux-image-6.5.0-1010-starfiveUpgrade linux-image-5.15.0-101-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1059-azureUpgrade linux-image-gke-5.15Upgrade linux-image-6.1.0-1035-oemUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1012-laptopUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-26-generic-64kUpgrade linux-image-5.15.0-1053-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1054-oracleUpgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.5.0-1017-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-101-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1017-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04b | Mar 12, 2024 | Jan 31, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 31, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub