< Back

CVE-2024-0193

Updated on 02 Jan 2024

Severity

6.7 Medium severity

Details

CVSS score
6.7
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.

Details

Affected product:
AlmaLinux 9.2 ESU , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , Oracle Linux 6 ELS , Oracle Linux 7 ELS , RHEL 7 ELS , TuxCare 9.6 ESU , TuxCare 9.8 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS , Ubuntu 20.04 ELS
Affected packages:
kernel @ 3.10.0 (+19 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
AlmaLinux 9 Will Not Fix
17 kernels
  • 5.14.0-162.6.1.el9_1
  • 5.14.0-70.26.1.el9_0
  • 5.14.0-70.30.1.el9_0
  • 5.14.0-70.17.1.el9_0
  • 5.14.0-70.22.1.el9_0
  • 5.14.0-162.12.1.el9_1
  • 5.14.0-162.18.1.el9_1
  • 5.14.0-162.22.2.el9_1
  • 5.14.0-162.23.1.el9_1
  • 5.14.0-284.11.1.el9_2
  • 5.14.0-284.18.1.el9_2
  • 5.14.0-70.13.1.el9_0
  • 5.14.0-284.25.1.el9_2
  • 5.14.0-284.30.1.el9_2
  • 5.14.0-362.8.1.el9_3
  • 5.14.0-362.13.1.el9_3
  • 5.14.0-362.18.1.el9_3
Amazon Linux 2023 Will Not Fix —
Amazon Linux 2 5.10 Will Not Fix —
Debian 11 Released
1 kernel
  • 5.10.197-1
Debian 11 cloud Released
1 kernel
  • 5.10.197-1
Debian 12 Released
4 kernels
  • 6.1.55-1
  • 6.1.64-1
  • 6.1.66-1
  • 6.1.67-1
Endurance 7 elrepo 6 Will Not Fix —
Oracle Linux 9 Will Not Fix
22 kernels
  • 5.14.0-70.13.1.0.3.el9_0
  • 5.14.0-70.17.1.0.1.el9_0
  • 5.14.0-70.22.1.0.1.el9_0
  • 5.14.0-70.26.1.0.1.el9_0
  • 5.14.0-162.6.1.el9_1
  • 5.14.0-284.11.1.el9_2
  • 5.14.0-162.23.1.el9_1
  • 5.14.0-162.22.2.el9_1
  • 5.14.0-162.18.1.el9_1
  • 5.14.0-162.12.1.el9_1
  • 5.14.0-70.30.1.0.1.el9_0
  • 5.14.0-284.18.1.el9_2
  • 5.14.0-284.25.1.el9_2
  • 5.14.0-284.25.1.0.1.el9_2
  • 5.14.0-284.30.0.1.el9_2
  • 5.14.0-284.30.1.el9_2
  • 5.14.0-362.8.1.el9_3
  • 5.14.0-362.13.0.1.el9_3
  • 5.14.0-362.13.1.el9_3
  • 5.14.0-362.18.0.1.el9_3
  • 5.14.0-362.18.0.2.el9_3
  • 5.14.0-362.18.1.el9_3
RHEL 9 Will Not Fix
18 kernels
  • 5.14.0-70.17.1.el9_0
  • 5.14.0-70.22.1.el9_0
  • 5.14.0-70.5.1.el9_0
  • 5.14.0-70.13.1.el9_0
  • 5.14.0-70.26.1.el9_0
  • 5.14.0-70.30.1.el9_0
  • 5.14.0-162.6.1.el9_1
  • 5.14.0-162.12.1.el9_1
  • 5.14.0-162.18.1.el9_1
  • 5.14.0-162.22.2.el9_1
  • 5.14.0-162.23.1.el9_1
  • 5.14.0-284.11.1.el9_2
  • 5.14.0-284.18.1.el9_2
  • 5.14.0-284.25.1.el9_2
  • 5.14.0-284.30.1.el9_2
  • 5.14.0-362.8.1.el9_3
  • 5.14.0-362.13.1.el9_3
  • 5.14.0-362.18.1.el9_3
Rocky Linux 9 Will Not Fix
16 kernels
  • 5.14.0-162.6.1.el9_1
  • 5.14.0-70.26.1.el9_0
  • 5.14.0-70.30.1.el9_0
  • 5.14.0-70.22.1.el9_0
  • 5.14.0-162.6.1.el9_1.0.1
  • 5.14.0-162.18.1.el9_1
  • 5.14.0-162.12.1.el9_1.0.1
  • 5.14.0-162.12.1.el9_1.0.2
  • 5.14.0-162.22.2.el9_1
  • 5.14.0-162.23.1.el9_1
  • 5.14.0-284.30.1.el9_2
  • 5.14.0-362.8.1.el9_3
  • 5.14.0-362.13.1.el9_3
  • 5.14.0-362.18.1.el9_3
  • 5.14.0-362.18.1.el9_3.0.1
  • 5.14.0-284.11.1.el9_2
Ubuntu 20.04 HWE AWS Released
4 kernels
  • 5.15.0-1048.53~20.04.1
  • 5.15.0-1050.55~20.04.1
  • 5.15.0-1051.56~20.04.1
  • 5.15.0-1049.54~20.04.1
Ubuntu 20.04 HWE Azure Released
1 kernel
  • 5.15.0-1050.57~20.04.1
Ubuntu 22.04 Released
4 kernels
  • 5.15.0-87.97
  • 5.15.0-88.98
  • 5.15.0-89.99
  • 5.15.0-91.101
Ubuntu 22.04 AWS Released
4 kernels
  • 5.15.0-1048.53
  • 5.15.0-1049.54
  • 5.15.0-1050.55
  • 5.15.0-1051.56
Ubuntu 22.04 Azure Released
4 kernels
  • 5.15.0-1050.57
  • 5.15.0-1051.59
  • 5.15.0-1052.60
  • 5.15.0-1053.61