CVEvulnerability

CVE-2024-0193

6.7 MEDIUM Published 2024-01-02 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-01-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-416

Description

A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.

Affected configurations

• redhat codeready linux builder for eus 9.2 • redhat codeready linux builder for ibm z systems eus 9.2 s390x • redhat codeready linux builder for power little endian eus 9.2 • redhat enterprise linux 9.2 • redhat enterprise linux for els 9.2 • redhat enterprise linux for eus 9.2 • redhat enterprise linux for ibm z systems 9.2 s390x • redhat enterprise linux for ibm z systems els 9.2 • redhat enterprise linux for ibm z systems eus 9.2 • redhat enterprise linux for power little endian els 9.2 • redhat enterprise linux for power little endian eus 9.2 • redhat enterprise linux for update services for sap solutions 9.2 • redhat enterprise linux server aus 9.2 • redhat enterprise linux server for power little endian update services for sap solutions 9.2 • redhat codeready linux builder 9.0 • redhat codeready linux builder for eus 9.4 • redhat codeready linux builder for eus 9.6 • redhat codeready linux builder for ibm z systems 9.0 s390x • redhat codeready linux builder for ibm z systems eus 9.4 s390x • redhat codeready linux builder for ibm z systems eus 9.6 s390x • redhat codeready linux builder for power little endian 9.0 ppc64le • redhat codeready linux builder for power little endian eus 9.4 ppc64le • redhat codeready linux builder for power little endian eus 9.6 ppc64le • redhat enterprise linux 9.0 • redhat enterprise linux for arm 64 9.4 aarch64 • redhat enterprise linux for arm 64 9.6 aarch64 • redhat enterprise linux for arm 64 els 9.4 aarch64 • redhat enterprise linux for arm 64 els 9.6 aarch64 • redhat enterprise linux for arm 64 eus 9.4 aarch64 • redhat enterprise linux for arm 64 eus 9.6 aarch64 • redhat enterprise linux for els 9.4 • redhat enterprise linux for els 9.6 • redhat enterprise linux for eus 9.4 • redhat enterprise linux for eus 9.6 • redhat enterprise linux for ibm z systems 9.0 s390x • redhat enterprise linux for ibm z systems 9.4 s390x • redhat enterprise linux for ibm z systems 9.6 s390x • redhat enterprise linux for ibm z systems els 9.4 s390x • redhat enterprise linux for ibm z systems els 9.6 s390x • redhat enterprise linux for ibm z systems eus 9.4 s390x • redhat enterprise linux for ibm z systems eus 9.6 s390x • redhat enterprise linux for power little endian els 9.4 ppc64le • redhat enterprise linux for power little endian els 9.6 ppc64le • redhat enterprise linux for power little endian eus 9.0 ppc64le • redhat enterprise linux for power little endian eus 9.4 ppc64le • redhat enterprise linux for power little endian eus 9.6 ppc64le • redhat enterprise linux for update services for sap solutions 9.4 • redhat enterprise linux for update services for sap solutions 9.6 • redhat enterprise linux server aus 9.4 • redhat enterprise linux server aus 9.6 • redhat enterprise linux server for power little endian update services for sap solutions 9.4 ppc64le • redhat enterprise linux server for power little endian update services for sap solutions 9.6 ppc64le • redhat enterprise linux for update services for sap solutions 9.0 • redhat enterprise linux for arm 64 9.0 aarch64 • redhat enterprise linux server for power little endian update services for sap solutions 9.0 ppc64le • linux linux kernel (>= 5.10.198 < 5.10.206) • linux linux kernel (>= 5.15.118 < 5.15.146) • linux linux kernel (>= 6.1.35 < 6.1.71) • linux linux kernel (>= 6.3.9 < 6.6.10) • redhat openshift logging (>= 5.0 < 5.8.6)

Related

Weakness · CWE (1)

References