A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
| AND |
|
History
No history.
Information
Published : 2024-01-02 18:15
Updated : 2026-06-17 06:52
NVD link : CVE-2024-0193
Mitre link : CVE-2024-0193
CVE.ORG link : CVE-2024-0193
JSON object : View
Products Affected
redhat
- enterprise_linux_for_ibm_z_systems
- enterprise_linux_server_aus
- codeready_linux_builder_for_ibm_z_systems_eus
- enterprise_linux
- enterprise_linux_for_power_little_endian_eus
- enterprise_linux_for_arm_64
- codeready_linux_builder_for_eus
- enterprise_linux_for_arm_64_eus
- enterprise_linux_for_power_little_endian
- enterprise_linux_for_update_services_for_sap_solutions
- enterprise_linux_for_eus
- openshift_logging
- enterprise_linux_for_arm_64_els
- codeready_linux_builder
- codeready_linux_builder_for_power_little_endian_eus
- enterprise_linux_for_ibm_z_systems_els
- codeready_linux_builder_for_ibm_z_systems
- enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions
- enterprise_linux_for_ibm_z_systems_eus
- enterprise_linux_for_els
- enterprise_linux_for_power_little_endian_els
- codeready_linux_builder_for_power_little_endian
linux
- linux_kernel
CWE
CWE-416
Use After Free
