A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The nft_setelem_catchall_deactivate() function checks whether the catch-all set element is active in the current generation instead of the next generation before freeing it, but only flags it inactive in the next generation, making it possible to free the element multiple times, leading to a double free vulnerability.
We recommend upgrading past commit b1db244ffd041a49ecc9618e8feb6b5c1afcdaa7.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-64kUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade perfUpgrade kernel-rt-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debugUpgrade rvUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-coreUpgrade kernel-devel-matchedUpgrade kernel-64k-coreUpgrade python3-perfUpgrade kernel-zfcpdumpUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-develUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-coreUpgrade libperfUpgrade kernel-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debugUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-modulesUpgrade rtlaUpgrade kernel-uki-virtUpgrade kernel-modules-extraUpgrade kernel-rt-debug-devel | Nov 4, 2024 | Jan 31, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headers | Feb 21, 2024 | Jan 31, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.75-99.163Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-devel | Feb 17, 2025 | Jan 31, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 31, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 12, 2024 | Jan 31, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Feb 29, 2024 | Jan 31, 2024 |
| Suse | — | Upgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade cluster-md-kmp-64kbUpgrade dtb-apmUpgrade dtb-mediatekUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade dtb-armUpgrade dtb-amdUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade ocfs2-kmp-rtUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-source-rtUpgrade kernel-kvmsmall-develUpgrade dtb-alteraUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-appleUpgrade kernel-obs-buildUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-azureUpgrade dtb-lgUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-sprdUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-azure-extra | Feb 15, 2024 | Jan 31, 2024 |
| Ubuntu | — | Upgrade linux-image-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-oem-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1051-intel-iotgUpgrade linux-image-6.5.0-1016-gcpUpgrade linux-image-5.15.0-1053-kvmUpgrade linux-image-5.15.0-1047-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1049-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.5.0-26-lowlatencyUpgrade linux-image-laptop-23.10Upgrade linux-image-oracleUpgrade linux-image-6.5.0-1019-oracle-64kUpgrade linux-image-5.15.0-1059-azure-fdeUpgrade linux-image-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-1019-oracleUpgrade linux-image-6.5.0-26-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-1049-ibmUpgrade linux-image-5.15.0-101-lowlatency-64kUpgrade linux-image-6.5.0-1016-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-101-generic-lpaeUpgrade linux-image-6.5.0-1013-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-101-genericUpgrade linux-image-5.15.0-1039-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1047-nvidia-lowlatencyUpgrade linux-image-5.15.0-1054-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-101-lowlatencyUpgrade linux-image-5.15.0-1056-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1054-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-starfiveUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1053-gkeUpgrade linux-image-6.5.0-1017-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1017-azureUpgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-101-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-oem-22.04Upgrade linux-image-6.1.0-1035-oemUpgrade linux-image-6.5.0-1018-oemUpgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-1012-laptopUpgrade linux-image-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-26-generic-64kUpgrade linux-image-6.5.0-1010-starfiveUpgrade linux-image-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1059-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-26-genericUpgrade linux-image-lowlatency-64k-hwe-20.04 | Mar 12, 2024 | Jan 31, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 31, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub