A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.
We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-debugUpgrade rtlaUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-64k-modulesUpgrade perfUpgrade kernel-64k-debug-develUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-64kUpgrade kernel-cross-headersUpgrade libperfUpgrade kernel-modules-coreUpgrade kernel-rt-debugUpgrade kernel-64k-modules-coreUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-64k-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-coreUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rtUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-64k-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade rvUpgrade kernel-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libs | Apr 11, 2024 | Jan 31, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-4.14.336-256.559Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.148-97.161Upgrade kernel-headersUpgrade kernel-livepatch-5.10.209-198.858Upgrade bpftool-debuginfoUpgrade python-perf | Feb 21, 2024 | Jan 31, 2024 |
| Amazon_linux | — | Upgrade kernel | Feb 19, 2024 | Jan 31, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-livepatch-6.1.75-99.163Upgrade perfUpgrade kernel-livepatch-6.1.72-96.166Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.77-99.164Upgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-devel | Feb 17, 2025 | Jan 31, 2024 |
| Centos_linux | — | Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_105_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_108_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_108_1Upgrade kpatch-patch-3_10_0-1160_105_1-debuginfo | Mar 13, 2024 | Jan 31, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | May 13, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Jun 3, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | May 31, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-develUpgrade perf | Jul 23, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Apr 9, 2024 | Jan 31, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 21, 2024 | Jan 31, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Feb 22, 2024 | Jan 31, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64 | Apr 8, 2024 | Jan 31, 2024 |
| Suse | — | Upgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-develUpgrade kernel-syms-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade kernel-sourceUpgrade kernel-64kb-optionalUpgrade dtb-armUpgrade kernel-devel-rtUpgrade kernel-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-apmUpgrade kernel-debug-develUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-manUpgrade kernel-azure-extraUpgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kernel-rt-develUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade dtb-freescaleUpgrade dtb-lgUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade dtb-caviumUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-azure-baseUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade kernel-docsUpgrade dtb-socionextUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade dtb-qcomUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade kernel-azureUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-azure-develUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kb | Feb 15, 2024 | Jan 31, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-223-lowlatencyUpgrade linux-image-5.4.0-1088-gkeopUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1054-oracleUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1047-nvidia-lowlatencyUpgrade linux-image-5.4.0-1081-bluefieldUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.5.0-1018-oemUpgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1053-kvmUpgrade linux-image-5.15.0-101-lowlatencyUpgrade linux-image-5.4.0-1120-oracleUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1150-kvmUpgrade linux-image-6.5.0-26-generic-64kUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1047-nvidiaUpgrade linux-image-azure-lts-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-4.4.0-1167-awsUpgrade linux-image-oemUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1068-ibmUpgrade linux-image-5.15.0-101-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1049-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-101-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-4.15.0-1129-oracleUpgrade linux-image-oracleUpgrade linux-image-4.4.0-252-lowlatencyUpgrade linux-image-5.15.0-101-lowlatency-64kUpgrade linux-image-5.15.0-1039-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1059-azureUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1049-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1019-oracleUpgrade linux-image-6.5.0-26-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-4.15.0-1175-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1033-iotUpgrade linux-image-5.4.0-174-genericUpgrade linux-image-5.4.0-1105-raspiUpgrade linux-image-5.15.0-101-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1160-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.5.0-1019-oracle-64kUpgrade linux-image-6.5.0-1013-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.5.0-1017-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1121-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1053-gkeUpgrade linux-image-azureUpgrade linux-image-4.15.0-223-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-1012-laptopUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1056-awsUpgrade linux-image-4.15.0-1166-awsUpgrade linux-image-5.4.0-1040-xilinx-zynqmpUpgrade linux-image-6.5.0-26-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-174-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1125-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1054-gcpUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1017-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-4.4.0-1130-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-1129-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-174-lowlatencyUpgrade linux-image-5.15.0-1059-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04cUpgrade linux-image-intelUpgrade linux-image-6.5.0-1016-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1010-starfiveUpgrade linux-image-oracle-64kUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1109-kvmUpgrade linux-image-5.15.0-1051-intel-iotgUpgrade linux-image-4.4.0-252-genericUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.5.0-1016-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1126-azureUpgrade linux-image-laptop-23.10Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-genericUpgrade linux-image-6.5.0-26-generic | Mar 12, 2024 | Jan 31, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 31, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub