High · published December 18, 2023
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-after-free.
We recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.6, < 5.10.204 | 5.10.204 |
| linux/linux_kernel | ≥ 5.11, < 5.15.143 | 5.15.143 |
| linux/linux_kernel | ≥ 5.16, < 6.1.68 | 6.1.68 |
| linux/linux_kernel | ≥ 6.2, < 6.6.7 | 6.6.7 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |