A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.
We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-modules-coreUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-64k-debug-coreUpgrade bpftoolUpgrade kernel-64k-develUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-64k-modules-extraUpgrade rtlaUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64kUpgrade libperfUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade perf | Apr 11, 2024 | Jan 31, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade kernel-livepatch-4.14.336-256.559Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.148-97.161Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.209-198.858Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Feb 21, 2024 | Jan 31, 2024 |
| Amazon_linux | — | Upgrade kernel | Feb 19, 2024 | Jan 31, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-develUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.75-99.163Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.72-96.166Upgrade perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.77-99.164Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpf-static | Feb 17, 2025 | Jan 31, 2024 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_108_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_105_1Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_108_1Upgrade kernel-rt | Mar 13, 2024 | Jan 31, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | May 13, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelists | Jun 3, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | May 31, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-tools | Jul 23, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Apr 9, 2024 | Jan 31, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 21, 2024 | Jan 31, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Feb 22, 2024 | Jan 31, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-rtUpgrade kernel-debug-modules | Apr 8, 2024 | Jan 31, 2024 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preemptUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade dtb-freescaleUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade dtb-armUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade kernel-default-manUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade dtb-xilinxUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-rt-livepatch-develUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-debug-livepatch-develUpgrade kernel-develUpgrade dtb-apmUpgrade kernel-default-develUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade kernel-rt-livepatchUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-defaultUpgrade dtb-amazonUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade dtb-qcomUpgrade dtb-socionextUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade dtb-allwinnerUpgrade kernel-preempt-develUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-vdsoUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade dtb-nvidia | Feb 15, 2024 | Jan 31, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-6.5.0-26-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1120-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-4.15.0-1160-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1047-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1049-raspiUpgrade linux-image-4.15.0-1150-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-101-genericUpgrade linux-image-bluefieldUpgrade linux-image-kvmUpgrade linux-image-6.5.0-1013-raspiUpgrade linux-image-5.15.0-101-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-oemUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1088-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-101-lowlatencyUpgrade linux-image-6.5.0-1019-oracleUpgrade linux-image-5.15.0-1053-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1054-oracleUpgrade linux-image-5.4.0-1068-ibmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-101-lowlatency-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-101-generic-64kUpgrade linux-image-azure-cvmUpgrade linux-image-6.5.0-1019-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1033-iotUpgrade linux-image-4.15.0-1175-azureUpgrade linux-image-6.5.0-1018-oemUpgrade linux-image-5.4.0-1105-raspiUpgrade linux-image-4.15.0-223-lowlatencyUpgrade linux-image-5.4.0-1081-bluefieldUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-174-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1056-awsUpgrade linux-image-5.15.0-1054-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-26-lowlatency-64kUpgrade linux-image-4.4.0-1130-kvmUpgrade linux-image-5.4.0-1125-gcpUpgrade linux-image-5.15.0-1051-intel-iotgUpgrade linux-image-5.15.0-1053-gkeUpgrade linux-image-aws-hweUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.4.0-252-genericUpgrade linux-image-5.4.0-1109-kvmUpgrade linux-image-6.5.0-1012-laptopUpgrade linux-image-intelUpgrade linux-image-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1121-awsUpgrade linux-image-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-1017-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1166-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.1.0-1035-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1010-starfiveUpgrade linux-image-5.4.0-1040-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-1016-awsUpgrade linux-image-6.5.0-26-genericUpgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-4.4.0-1129-awsUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-starfiveUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-223-genericUpgrade linux-image-5.4.0-1126-azureUpgrade linux-image-raspiUpgrade linux-image-6.5.0-1016-gcpUpgrade linux-image-5.4.0-174-generic-lpaeUpgrade linux-image-5.4.0-174-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1059-azure-fdeUpgrade linux-image-4.4.0-1167-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1129-oracleUpgrade linux-image-5.15.0-1049-ibmUpgrade linux-image-5.15.0-1059-azureUpgrade linux-image-5.15.0-1039-gkeopUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-oracleUpgrade linux-image-6.5.0-26-generic-64kUpgrade linux-image-4.4.0-252-lowlatencyUpgrade linux-image-6.5.0-1017-azureUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1047-nvidia-lowlatency | Mar 12, 2024 | Jan 31, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 31, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub