A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.
We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-toolsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-docUpgrade kernel-64k-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virtUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-devel-matchedUpgrade kernel-headersUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-64kUpgrade kernel-develUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-develUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade libperfUpgrade kernelUpgrade kernel-debug-uki-virtUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade rtlaUpgrade kernel-debug | Apr 11, 2024 | Jan 31, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.148-97.161Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.209-198.858Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.336-256.559Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-devel | Feb 21, 2024 | Jan 31, 2024 |
| Amazon_linux | — | Upgrade kernel | Feb 19, 2024 | Jan 31, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.77-99.164Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.75-99.163Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.72-96.166Upgrade kernel-devel | Feb 17, 2025 | Jan 31, 2024 |
| Centos_linux | — | Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_105_1Upgrade kpatch-patch-3_10_0-1160_108_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_108_1 | Mar 13, 2024 | Jan 31, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | May 13, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jun 3, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | May 31, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade perf | Jul 23, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Apr 9, 2024 | Jan 31, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 21, 2024 | Jan 31, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Feb 22, 2024 | Jan 31, 2024 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade perf-debuginfoUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extra | Apr 8, 2024 | Jan 31, 2024 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-azure-develUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade dtb-marvellUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-azure-baseUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-renesasUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade kernel-rtUpgrade kernel-rt_debugUpgrade kernel-preempt-develUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade dtb-armUpgrade kernel-rt-livepatchUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade kernel-azure-vdsoUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-preemptUpgrade dtb-freescaleUpgrade dtb-appleUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-develUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-devel | Feb 15, 2024 | Jan 31, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-252-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-azure-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1047-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-6.5.0-1019-oracle-64kUpgrade linux-image-5.4.0-1120-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.5.0-26-generic-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1049-ibmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-101-lowlatencyUpgrade linux-image-5.15.0-101-generic-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1033-iotUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1081-bluefieldUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-223-lowlatencyUpgrade linux-image-5.15.0-1054-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1175-azureUpgrade linux-image-5.4.0-1105-raspiUpgrade linux-image-6.5.0-1018-oemUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1160-gcpUpgrade linux-image-5.15.0-101-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-cvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.4.0-1129-awsUpgrade linux-image-6.5.0-26-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1056-awsUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1125-gcpUpgrade linux-image-5.15.0-1054-gcpUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-4.4.0-1130-kvmUpgrade linux-image-5.15.0-1051-intel-iotgUpgrade linux-image-4.4.0-252-genericUpgrade linux-image-6.5.0-1016-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1109-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1126-azureUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-5.4.0-1040-xilinx-zynqmpUpgrade linux-image-intelUpgrade linux-image-6.5.0-26-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-4.15.0-1166-awsUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1053-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-1017-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-1010-starfiveUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-1016-awsUpgrade linux-image-6.5.0-1012-laptopUpgrade linux-image-azure-fdeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-174-lowlatencyUpgrade linux-image-5.15.0-1059-azure-fdeUpgrade linux-image-5.4.0-174-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1121-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-laptop-23.10Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-223-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-starfiveUpgrade linux-image-5.4.0-1068-ibmUpgrade linux-image-5.4.0-174-genericUpgrade linux-image-awsUpgrade linux-image-5.15.0-1053-kvmUpgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-4.4.0-1167-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1088-gkeopUpgrade linux-image-5.15.0-101-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1039-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1059-azureUpgrade linux-image-6.5.0-1017-azureUpgrade linux-image-5.15.0-1049-raspiUpgrade linux-image-6.5.0-1019-oracleUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1129-oracleUpgrade linux-image-4.15.0-1150-kvmUpgrade linux-image-6.5.0-26-lowlatencyUpgrade linux-image-6.5.0-1013-raspiUpgrade linux-image-oemUpgrade linux-image-5.15.0-1047-nvidiaUpgrade linux-image-5.15.0-101-generic-lpaeUpgrade linux-image-azure-lts-20.04 | Mar 12, 2024 | Jan 31, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 31, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub