A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.
We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade kernel-rtUpgrade kernel-uki-virtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-docUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modules-coreUpgrade rvUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-coreUpgrade kernel-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-64k-develUpgrade python3-perfUpgrade kernel-64k-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade rtlaUpgrade kernel-64k-debug-modulesUpgrade kernel-64kUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-develUpgrade perfUpgrade kernel-modules-coreUpgrade libperfUpgrade kernel-64k-modules-extraUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-64k-debug-core | Apr 11, 2024 | Jan 31, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.336-256.559Upgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.148-97.161Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.209-198.858Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Feb 21, 2024 | Jan 31, 2024 |
| Amazon_linux | — | Upgrade kernel | Feb 19, 2024 | Jan 31, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.75-99.163Upgrade perfUpgrade kernel-livepatch-6.1.72-96.166Upgrade kernel-tools-develUpgrade kernel-livepatch-6.1.77-99.164Upgrade kernel-tools-debuginfo | Feb 17, 2025 | Jan 31, 2024 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_105_1Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_108_1Upgrade kpatch-patch-3_10_0-1160_108_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kernel-rt | Mar 13, 2024 | Jan 31, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelists | May 13, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jun 3, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelists | May 31, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 23, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Apr 9, 2024 | Jan 31, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 21, 2024 | Jan 31, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Feb 22, 2024 | Jan 31, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-debuginfoUpgrade kernel-devel | Apr 8, 2024 | Jan 31, 2024 |
| Suse | — | Upgrade dtb-allwinnerUpgrade dtb-alteraUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade kernel-docs-htmlUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-preempt-develUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade kernel-rt_debugUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade kernel-default-manUpgrade kernel-rt_debug-vdsoUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-symsUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade kernel-default-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-appleUpgrade dtb-lgUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-develUpgrade cluster-md-kmp-azureUpgrade kernel-debugUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade kernel-preemptUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-source-azure | Feb 15, 2024 | Jan 31, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1059-azure-fdeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-laptop-23.10Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.1.0-1035-oemUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1054-gcpUpgrade linux-image-5.4.0-1109-kvmUpgrade linux-image-5.15.0-1051-intel-iotgUpgrade linux-image-6.5.0-1016-gcpUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1053-gkeUpgrade linux-image-5.4.0-1126-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-5.4.0-1125-gcpUpgrade linux-image-5.15.0-1056-awsUpgrade linux-image-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-223-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1017-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64kUpgrade linux-image-4.4.0-252-genericUpgrade linux-image-4.4.0-1130-kvmUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1121-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-26-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1166-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1012-laptopUpgrade linux-image-azureUpgrade linux-image-5.4.0-174-lowlatencyUpgrade linux-image-6.5.0-1010-starfiveUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1040-xilinx-zynqmpUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-174-generic-lpaeUpgrade linux-image-6.5.0-26-lowlatency-64kUpgrade linux-image-4.4.0-1129-awsUpgrade linux-image-oem-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-6.5.0-1016-awsUpgrade linux-image-5.4.0-1033-iotUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1175-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-1160-gcpUpgrade linux-image-6.5.0-1018-oemUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1049-raspiUpgrade linux-image-5.15.0-1059-azureUpgrade linux-image-6.5.0-1019-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.5.0-1017-azureUpgrade linux-image-5.15.0-1039-gkeopUpgrade linux-image-5.15.0-1049-ibmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1053-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-101-lowlatencyUpgrade linux-image-5.15.0-1054-oracleUpgrade linux-image-5.15.0-101-lowlatency-64kUpgrade linux-image-4.4.0-252-lowlatencyUpgrade linux-image-5.4.0-1088-gkeopUpgrade linux-image-5.4.0-1120-oracleUpgrade linux-image-6.5.0-26-generic-64kUpgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-6.5.0-1019-oracle-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1068-ibmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-101-generic-64kUpgrade linux-image-5.15.0-1047-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-101-genericUpgrade linux-image-6.5.0-1013-raspiUpgrade linux-image-azure-lts-18.04Upgrade linux-image-6.5.0-26-lowlatencyUpgrade linux-image-4.4.0-1167-awsUpgrade linux-image-5.15.0-1047-nvidiaUpgrade linux-image-raspi2Upgrade linux-image-bluefieldUpgrade linux-image-kvmUpgrade linux-image-5.15.0-101-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1150-kvmUpgrade linux-image-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1129-oracleUpgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-4.15.0-223-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.4.0-174-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1105-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1081-bluefield | Mar 12, 2024 | Jan 31, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 31, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub