High · published January 31, 2024
CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 98.1th percentile for exploit probability.
⚡ A sneaky use-after-free vulnerability in the Linux kernel's netfilter component can open the door for local privilege escalation! 🌐 Think of it like a restaurant where the staff keeps dropping and picking up the same order without realizing they already served it — chaos ensues when they try to serve the same dish twice, and anyone can claim it! An attacker could exploit this flaw to gain elevated privileges, allowing them to execute arbitrary code with kernel-level access. This is absolutely devastating, as it could lead to complete control over the system and compromise sensitive data.
Think of it like a restaurant where the staff keeps dropping and picking up the same order without realizing they already served it — chaos ensues when they try to serve the same dish twice, and anyone can claim it! In the nft_verdict_init() function, allowing positive values as drop errors can trigger a double free when NF_DROP is issued, causing a use-after-free scenario that enables privilege escalation through the nf_hook_slow() function.
An attacker could exploit this flaw to gain elevated privileges, allowing them to execute arbitrary code with kernel-level access. This is absolutely devastating, as it could lead to complete control over the system and compromise sensitive data. Upgrade your kernel to a version beyond commit f342de4e2f33e0e39165d8639387aa6c19dff660 immediately. Review your security settings and audit your systems to ensure no unauthorized access has been granted due to this vulnerability. You've got this! By following these steps, you'll bolster your defenses and keep your systems safe. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| netapp/h300s_firmware | all versions | — |
| netapp/h500s_firmware | all versions | — |
| netapp/h700s_firmware | all versions | — |
| netapp/h410s_firmware | all versions | — |
| netapp/h410c_firmware | all versions | — |
| netapp/bootstrap_os | all versions | — |
| linux/linux_kernel | ≥ 3.15, < 5.15.149 | 5.15.149 |
| linux/linux_kernel | ≥ 6.1, < 6.1.76 | 6.1.76 |
| linux/linux_kernel | ≥ 6.2, < 6.6.15 | 6.6.15 |
| linux/linux_kernel | ≥ 6.7, < 6.7.3 | 6.7.3 |
| linux/linux_kernel | all versions | — |
| fedoraproject/fedora | all versions | — |
| redhat/enterprise_linux_desktop | all versions | — |
| redhat/enterprise_linux_for_ibm_z_systems | all versions | — |
| redhat/enterprise_linux_for_power_big_endian | all versions | — |
| redhat/enterprise_linux_for_power_little_endian | all versions | — |
| redhat/enterprise_linux_server | all versions | — |
| redhat/enterprise_linux_workstation | all versions | — |
| debian/debian_linux | all versions | — |
| netapp/a250_firmware | all versions | — |
| netapp/500f_firmware | all versions | — |
| netapp/c250_firmware | all versions | — |