< Back

CVE-2024-1085

Updated on 31 Jan 2024

Severity

7.8 High severity

Details

CVSS score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE ID: CWE-416 Use After Free
Affected product
Affected component
Links: NIST CIRCL RHEL Ubuntu

Overview

About vulnerability

A use-after-free vulnerability in the Linux kernel’s netfilter: nf_tables component can be exploited to achieve local privilege escalation.

The nft_setelem_catchall_deactivate() function checks whether the catch-all set element is active in the current generation instead of the next generation before freeing it, but only flags it inactive in the next generation, making it possible to free the element multiple times, leading to a double free vulnerability.

We recommend upgrading past commit b1db244ffd041a49ecc9618e8feb6b5c1afcdaa7.

Details

Affected product:: AlmaLinux 9.2 ESU , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , Oracle Linux 6 ELS , TuxCare 9.6 ESU
Affected packages:: kernel @ 2.6.32 (+8 more)

Fixes

Operating system / Project

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system	Status	Covered kernels
AlmaLinux 9	Released	19 kernels 5.14.0-162.12.1.el9_1 5.14.0-162.18.1.el9_1 5.14.0-162.22.2.el9_1 5.14.0-162.23.1.el9_1 5.14.0-162.6.1.el9_1 5.14.0-284.11.1.el9_2 5.14.0-284.18.1.el9_2 5.14.0-284.25.1.el9_2 5.14.0-284.30.1.el9_2 5.14.0-362.13.1.el9_3 5.14.0-362.18.1.el9_3 5.14.0-362.24.1.el9_3 5.14.0-362.24.2.el9_3 5.14.0-362.8.1.el9_3 5.14.0-70.13.1.el9_0 5.14.0-70.17.1.el9_0 5.14.0-70.22.1.el9_0 5.14.0-70.26.1.el9_0 5.14.0-70.30.1.el9_0
Amazon Linux 2023	Planned	—
Debian 12	Planned	—
Oracle Linux 8 UEK 7	Released	27 kernels 5.15.0-0.30.19.el8uek 5.15.0-0.30.20.1.el8uek 5.15.0-0.30.20.el8uek 5.15.0-1.43.4.1.el8uek 5.15.0-1.43.4.2.el8uek 5.15.0-100.96.32.el8uek 5.15.0-101.103.2.1.el8uek 5.15.0-102.110.5.1.el8uek 5.15.0-102.110.5.el8uek 5.15.0-103.114.4.el8uek 5.15.0-104.119.4.2.el8uek 5.15.0-105.125.6.2.1.el8uek 5.15.0-105.125.6.2.2.el8uek 5.15.0-105.125.6.2.el8uek 5.15.0-106.131.4.el8uek 5.15.0-2.52.3.el8uek 5.15.0-200.131.27.1.el8uek 5.15.0-200.131.27.el8uek 5.15.0-201.135.6.el8uek 5.15.0-202.135.2.el8uek 5.15.0-203.146.5.1.el8uek 5.15.0-3.60.5.1.el8uek 5.15.0-4.70.5.2.el8uek 5.15.0-5.76.5.1.el8uek 5.15.0-6.80.3.1.el8uek 5.15.0-7.86.6.1.el8uek 5.15.0-8.91.4.1.el8uek
Oracle Linux 9	Released	25 kernels 5.14.0-162.12.1.el9_1 5.14.0-162.18.1.el9_1 5.14.0-162.22.2.el9_1 5.14.0-162.23.1.el9_1 5.14.0-162.6.1.el9_1 5.14.0-284.11.1.el9_2 5.14.0-284.18.1.el9_2 5.14.0-284.25.1.0.1.el9_2 5.14.0-284.25.1.el9_2 5.14.0-284.30.0.1.el9_2 5.14.0-284.30.1.el9_2 5.14.0-362.13.0.1.el9_3 5.14.0-362.13.1.el9_3 5.14.0-362.18.0.1.el9_3 5.14.0-362.18.0.2.el9_3 5.14.0-362.18.1.el9_3 5.14.0-362.24.1.0.1.el9_3 5.14.0-362.24.1.0.2.el9_3 5.14.0-362.24.1.el9_3 5.14.0-362.8.1.el9_3 5.14.0-70.13.1.0.3.el9_0 5.14.0-70.17.1.0.1.el9_0 5.14.0-70.22.1.0.1.el9_0 5.14.0-70.26.1.0.1.el9_0 5.14.0-70.30.1.0.1.el9_0
Oracle Linux 9 UEK 7	Released	27 kernels 5.15.0-5.76.5.1.el9uek 5.15.0-6.80.3.1.el9uek 5.15.0-7.86.6.1.el9uek 5.15.0-8.91.4.1.el9uek 5.15.0-0.30.19.el9uek 5.15.0-0.30.20.1.el9uek 5.15.0-0.30.20.el9uek 5.15.0-1.43.4.1.el9uek 5.15.0-1.43.4.2.el9uek 5.15.0-100.96.32.el9uek 5.15.0-101.103.2.1.el9uek 5.15.0-102.110.5.1.el9uek 5.15.0-102.110.5.el9uek 5.15.0-103.114.4.el9uek 5.15.0-104.119.4.2.el9uek 5.15.0-105.125.6.2.1.el9uek 5.15.0-105.125.6.2.2.el9uek 5.15.0-105.125.6.2.el9uek 5.15.0-106.131.4.el9uek 5.15.0-2.52.3.el9uek 5.15.0-200.131.27.1.el9uek 5.15.0-200.131.27.el9uek 5.15.0-201.135.6.el9uek 5.15.0-202.135.2.el9uek 5.15.0-203.146.5.1.el9uek 5.15.0-3.60.5.1.el9uek 5.15.0-4.70.5.2.el9uek
Proxmox VE 7 5.15	Released	43 kernels 5.15.102-1-pve-5.15.102-1 5.15.104-1-pve-5.15.104-1 5.15.104-1-pve-5.15.104-2 5.15.107-1-pve-5.15.107-1 5.15.107-2-pve-5.15.107-2 5.15.108-1-pve-5.15.108-1 5.15.108-1-pve-5.15.108-2 5.15.116-1-pve-5.15.116-1 5.15.12-1-pve-5.15.12-2 5.15.12-1-pve-5.15.12-3 5.15.126-1-pve-5.15.126-1 5.15.131-1-pve-5.15.131-1 5.15.131-1-pve-5.15.131-2 5.15.131-2-pve-5.15.131-3 5.15.136-1-pve-5.15.136-1 5.15.17-1-pve-5.15.17-1 5.15.19-1-pve-5.15.19-1 5.15.19-2-pve-5.15.19-2 5.15.19-2-pve-5.15.19-3 5.15.27-1-pve-5.15.27-1 5.15.30-1-pve-5.15.30-1 5.15.30-2-pve-5.15.30-3 5.15.35-1-pve-5.15.35-1 5.15.35-1-pve-5.15.35-2 5.15.35-1-pve-5.15.35-3 5.15.35-2-pve-5.15.35-4 5.15.35-2-pve-5.15.35-5 5.15.35-3-pve-5.15.35-6 5.15.39-1-pve-5.15.39-1 5.15.39-2-pve-5.15.39-2 5.15.39-3-pve-5.15.39-3 5.15.39-4-pve-5.15.39-4 5.15.5-1-pve-5.15.5-1 5.15.53-1-pve-5.15.53-1 5.15.60-1-pve-5.15.60-1 5.15.60-2-pve-5.15.60-2 5.15.64-1-pve-5.15.64-1 5.15.7-1-pve-5.15.7-1 5.15.74-1-pve-5.15.74-1 5.15.83-1-pve-5.15.83-1 5.15.85-1-pve-5.15.85-1 5.15.111-1-pve-5.15.111-1 5.15.143-1-pve-5.15.143-1
RHEL 9	Released	19 kernels 5.14.0-162.12.1.el9_1 5.14.0-162.18.1.el9_1 5.14.0-162.22.2.el9_1 5.14.0-162.23.1.el9_1 5.14.0-162.6.1.el9_1 5.14.0-284.11.1.el9_2 5.14.0-284.18.1.el9_2 5.14.0-284.25.1.el9_2 5.14.0-284.30.1.el9_2 5.14.0-362.13.1.el9_3 5.14.0-362.18.1.el9_3 5.14.0-362.24.1.el9_3 5.14.0-362.8.1.el9_3 5.14.0-70.13.1.el9_0 5.14.0-70.17.1.el9_0 5.14.0-70.22.1.el9_0 5.14.0-70.26.1.el9_0 5.14.0-70.30.1.el9_0 5.14.0-70.5.1.el9_0
Rocky Linux 9	Released	18 kernels 5.14.0-162.12.1.el9_1.0.1 5.14.0-162.12.1.el9_1.0.2 5.14.0-162.18.1.el9_1 5.14.0-162.22.2.el9_1 5.14.0-162.23.1.el9_1 5.14.0-162.6.1.el9_1.0.1 5.14.0-162.6.1.el9_1 5.14.0-284.30.1.el9_2 5.14.0-362.13.1.el9_3 5.14.0-362.18.1.el9_3.0.1 5.14.0-362.18.1.el9_3 5.14.0-362.24.1.el9_3.0.1 5.14.0-362.24.1.el9_3 5.14.0-362.8.1.el9_3 5.14.0-70.22.1.el9_0 5.14.0-70.26.1.el9_0 5.14.0-70.30.1.el9_0 5.14.0-284.11.1.el9_2
Ubuntu 20.04 HWE AWS	Released	34 kernels 5.15.0-1014.18~20.04.1 5.15.0-1015.19~20.04.1 5.15.0-1017.21~20.04.1 5.15.0-1018.22~20.04.1 5.15.0-1019.23~20.04.1 5.15.0-1020.24~20.04.1 5.15.0-1021.25~20.04.1 5.15.0-1022.26~20.04.1 5.15.0-1023.27~20.04.1 5.15.0-1026.30~20.04.2 5.15.0-1027.31~20.04.1 5.15.0-1028.32~20.04.1 5.15.0-1030.34~20.04.1 5.15.0-1031.35~20.04.1 5.15.0-1033.37~20.04.1 5.15.0-1034.38~20.04.1 5.15.0-1035.39~20.04.1 5.15.0-1039.44~20.04.1 5.15.0-1040.45~20.04.1 5.15.0-1041.46~20.04.1 5.15.0-1043.48~20.04.1 5.15.0-1044.49~20.04.1 5.15.0-1045.50~20.04.1 5.15.0-1047.52~20.04.1 5.15.0-1048.53~20.04.1 5.15.0-1049.54~20.04.1 5.15.0-1050.55~20.04.1 5.15.0-1051.56~20.04.1 5.15.0-1052.57~20.04.1 5.15.0-1053.58~20.04.1 5.15.0-1055.60~20.04.1 5.15.0-1036.40~20.04.1 5.15.0-1037.41~20.04.1 5.15.0-1038.43~20.04.1
Ubuntu 20.04 HWE Azure	Released	18 kernels 5.15.0-1008.9~20.04.1 5.15.0-1017.20~20.04.1 5.15.0-1013.16~20.04.1 5.15.0-1014.17~20.04.1 5.15.0-1019.24~20.04.1 5.15.0-1020.25~20.04.1 5.15.0-1021.26~20.04.1 5.15.0-1022.27~20.04.1 5.15.0-1023.29~20.04.1 5.15.0-1024.30~20.04.1 5.15.0-1029.36~20.04.1 5.15.0-1034.41~20.04.1 5.15.0-1049.56~20.04.1 5.15.0-1050.57~20.04.1 5.15.0-1054.62~20.04.1 5.15.0-1056.64~20.04.1 5.15.0-1057.65~20.04.1 5.15.0-1058.66~20.04.2
Ubuntu 22.04	Released	47 kernels 5.15.0-100.110 5.15.0-37.39 5.15.0-25.25 5.15.0-27.28 5.15.0-28.29 5.15.0-29.30 5.15.0-30.31 5.15.0-33.34 5.15.0-35.36 5.15.0-39.42 5.15.0-40.43 5.15.0-41.44 5.15.0-43.46 5.15.0-46.49 5.15.0-47.51 5.15.0-48.54 5.15.0-50.56 5.15.0-52.58 5.15.0-53.59 5.15.0-54.60 5.15.0-56.62 5.15.0-57.63 5.15.0-58.64 5.15.0-60.66 5.15.0-67.74 5.15.0-68.75 5.15.0-69.76 5.15.0-70.77 5.15.0-71.78 5.15.0-72.79 5.15.0-73.80 5.15.0-74.81 5.15.0-75.82 5.15.0-76.83 5.15.0-78.85 5.15.0-79.86 5.15.0-82.91 5.15.0-83.92 5.15.0-84.93 5.15.0-86.96 5.15.0-87.97 5.15.0-88.98 5.15.0-89.99 5.15.0-91.101 5.15.0-92.102 5.15.0-94.104 5.15.0-97.107
Ubuntu 22.04 AWS	Released	41 kernels 5.15.0-1004.6 5.15.0-1005.7 5.15.0-1008.10 5.15.0-1009.11 5.15.0-1011.14 5.15.0-1013.17 5.15.0-1014.18 5.15.0-1015.19 5.15.0-1017.21 5.15.0-1018.22 5.15.0-1020.24 5.15.0-1021.25 5.15.0-1022.26 5.15.0-1023.27 5.15.0-1024.29 5.15.0-1026.30 5.15.0-1027.31 5.15.0-1028.32 5.15.0-1030.34 5.15.0-1031.35 5.15.0-1032.36 5.15.0-1033.37 5.15.0-1034.38 5.15.0-1035.39 5.15.0-1036.40 5.15.0-1037.41 5.15.0-1038.43 5.15.0-1039.44 5.15.0-1040.45 5.15.0-1042.47 5.15.0-1043.48 5.15.0-1044.49 5.15.0-1045.50 5.15.0-1047.52 5.15.0-1048.53 5.15.0-1049.54 5.15.0-1050.55 5.15.0-1051.56 5.15.0-1052.57 5.15.0-1053.58 5.15.0-1055.60
Ubuntu 22.04 Azure	Released	38 kernels 5.15.0-1003.4 5.15.0-1005.6 5.15.0-1007.8 5.15.0-1008.9 5.15.0-1010.12 5.15.0-1012.15 5.15.0-1013.16 5.15.0-1014.17 5.15.0-1017.20 5.15.0-1019.24 5.15.0-1020.25 5.15.0-1021.26 5.15.0-1022.27 5.15.0-1023.29 5.15.0-1024.30 5.15.0-1029.36 5.15.0-1034.41 5.15.0-1035.42 5.15.0-1036.43 5.15.0-1037.44 5.15.0-1038.45 5.15.0-1039.46 5.15.0-1040.47 5.15.0-1041.48 5.15.0-1042.49 5.15.0-1044.51 5.15.0-1045.52 5.15.0-1046.53 5.15.0-1047.54 5.15.0-1049.56 5.15.0-1050.57 5.15.0-1051.59 5.15.0-1052.60 5.15.0-1053.61 5.15.0-1054.62 5.15.0-1056.64 5.15.0-1057.65 5.15.0-1058.66

Release info

Copy page link

Open as a page

Advisory

CLSA-2025:1748945064

Operating system

CentOS 8.4 ELS

Published date

Nov 16, 2014

Project

Linux

Version

2.11.0-1~ubuntu16.04.1+tuxcare.els12

How to fix

Update command:

apt-get update
apt-get --only-upgrade install ansible*

Changelog

Insufficiently Random Passwords Leakage
Debian/patches/CVE-2020-10729.patch: Fix caching of Jinja2 expressions to prevent caching dynamic results
CVE-2020-10729

Updated packages

ansible_2.5.1+dfsg-1ubuntu0.1+tuxcare.els6_all.deb

CVE-2024-1085

Severity

Details

Overview

About vulnerability

Details

Statement

Fixes

Statement

KernelCare state

Subscribe to updates

Unsubscribe

Contact us

Message Delivered!