High · published July 31, 2023
A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.16, < 6.1.42 | 6.1.42 |
| linux/linux_kernel | ≥ 6.2, < 6.4.7 | 6.4.7 |
| linux/linux_kernel | ≥ 5.6, < 5.10.188 | 5.10.188 |
| linux/linux_kernel | ≥ 5.11, < 5.15.123 | 5.15.123 |
| fedoraproject/fedora | all versions | — |
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux | all versions | — |
| netapp/h300s | all versions | — |
| netapp/h410s | all versions | — |
| netapp/h500s | all versions | — |
| netapp/h700s | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |