A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.
We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade kernel-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade libperfUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-64kUpgrade kernel-headersUpgrade kernel-64k-develUpgrade bpftoolUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modulesUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-64k-coreUpgrade rvUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virtUpgrade kernel-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade kernel-64k-debugUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-abi-stablelists | Apr 11, 2024 | Jan 31, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.209-198.858Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.148-97.161Upgrade kernel-develUpgrade kernel-livepatch-4.14.336-256.559Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-debuginfo | Feb 21, 2024 | Jan 31, 2024 |
| Amazon_linux | — | Upgrade kernel | Feb 19, 2024 | Jan 31, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.77-99.164Upgrade kernel-develUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-livepatch-6.1.72-96.166Upgrade kernel-libbpfUpgrade perfUpgrade kernel-livepatch-6.1.75-99.163Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Jan 31, 2024 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_105_1Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_108_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_108_1 | Mar 13, 2024 | Jan 31, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelists | May 13, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftool | Jun 3, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | May 31, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-tools | Jul 23, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Apr 9, 2024 | Jan 31, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 21, 2024 | Jan 31, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Feb 22, 2024 | Jan 31, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modulesUpgrade perfUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rtUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extra | Apr 8, 2024 | Jan 31, 2024 |
| Suse | — | Upgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade kernel-default-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade dtb-amdUpgrade kernel-64kbUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade dtb-lgUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kernel-preemptUpgrade kernel-default-manUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade dtb-exynosUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade dtb-qcomUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-preempt-develUpgrade kernel-debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade kernel-azureUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-baseUpgrade gfs2-kmp-azure | Feb 15, 2024 | Jan 31, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.4.0-1130-kvmUpgrade linux-image-6.5.0-1012-laptopUpgrade linux-image-starfiveUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-intelUpgrade linux-image-6.5.0-26-genericUpgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.5.0-1017-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1121-awsUpgrade linux-image-aws-hweUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1040-xilinx-zynqmpUpgrade linux-image-laptop-23.10Upgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-174-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1053-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-4.4.0-252-genericUpgrade linux-image-5.15.0-1059-azure-fdeUpgrade linux-image-5.4.0-174-lowlatencyUpgrade linux-image-6.5.0-1016-gcpUpgrade linux-image-5.4.0-1109-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-5.4.0-1126-azureUpgrade linux-image-5.15.0-1051-intel-iotgUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1054-gcpUpgrade linux-image-6.5.0-1010-starfiveUpgrade linux-image-5.4.0-1125-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1056-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-4.4.0-1129-awsUpgrade linux-image-6.5.0-1016-awsUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1166-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-26-lowlatency-64kUpgrade linux-image-4.15.0-223-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.5.0-1013-raspiUpgrade linux-image-5.4.0-1081-bluefieldUpgrade linux-image-5.4.0-1088-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-4.4.0-252-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-101-generic-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-174-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.5.0-1019-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1150-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1167-awsUpgrade linux-image-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1047-nvidiaUpgrade linux-image-raspi2Upgrade linux-image-aws-lts-18.04Upgrade linux-image-bluefieldUpgrade linux-image-6.5.0-1018-oemUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1039-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1059-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1019-oracle-64kUpgrade linux-image-5.4.0-1120-oracleUpgrade linux-image-5.4.0-1033-iotUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1129-oracleUpgrade linux-image-6.5.0-1017-azureUpgrade linux-image-5.15.0-101-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1047-nvidia-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-lts-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1049-raspiUpgrade linux-image-gkeUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-26-generic-64kUpgrade linux-image-5.4.0-1068-ibmUpgrade linux-image-5.15.0-1053-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-101-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-101-lowlatencyUpgrade linux-image-5.15.0-1054-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.5.0-26-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-223-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1105-raspiUpgrade linux-image-5.15.0-1049-ibmUpgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1175-azureUpgrade linux-image-4.15.0-1160-gcpUpgrade linux-image-5.15.0-101-generic-lpaeUpgrade linux-image-kvm | Mar 12, 2024 | Jan 31, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 31, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub