A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The nft_setelem_catchall_deactivate() function checks whether the catch-all set element is active in the current generation instead of the next generation before freeing it, but only flags it inactive in the next generation, making it possible to free the element multiple times, leading to a double free vulnerability.
We recommend upgrading past commit b1db244ffd041a49ecc9618e8feb6b5c1afcdaa7.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-uki-virtUpgrade kernelUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-debug-uki-virtUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade libperfUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade rtlaUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64kUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debugUpgrade rvUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade bpftoolUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-debug-modules-extra | Nov 4, 2024 | Jan 31, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.148-97.158Upgrade bpftool-debuginfo | Feb 21, 2024 | Jan 31, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.75-99.163Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-libbpf | Feb 17, 2025 | Jan 31, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 31, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 12, 2024 | Jan 31, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Feb 29, 2024 | Jan 31, 2024 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade dtb-qcomUpgrade kernel-rt-livepatchUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-broadcomUpgrade kernel-obs-buildUpgrade ocfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade dtb-amazonUpgrade kernel-devel-azureUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade kernel-symsUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-develUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade kernel-syms-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade dtb-amlogic | Feb 15, 2024 | Jan 31, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-101-genericUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1049-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1059-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1016-gcpUpgrade linux-image-5.15.0-1047-nvidiaUpgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1051-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-6.5.0-1013-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-26-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-6.5.0-1019-oracleUpgrade linux-image-gkeopUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-101-lowlatency-64kUpgrade linux-image-5.15.0-1053-kvmUpgrade linux-image-intelUpgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1039-gkeopUpgrade linux-image-5.15.0-1049-ibmUpgrade linux-image-5.15.0-101-generic-lpaeUpgrade linux-image-6.5.0-1016-awsUpgrade linux-image-6.5.0-26-lowlatencyUpgrade linux-image-6.5.0-1019-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-azureUpgrade linux-image-5.15.0-101-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.15.0-101-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-6.5.0-1017-azureUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1054-gcpUpgrade linux-image-5.15.0-1047-nvidia-lowlatencyUpgrade linux-image-starfiveUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1054-oracleUpgrade linux-image-6.5.0-1018-oemUpgrade linux-image-6.5.0-1017-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-26-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-1012-laptopUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1053-gkeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1010-starfiveUpgrade linux-image-5.15.0-1059-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1056-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-26-generic | Mar 12, 2024 | Jan 31, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 31, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub