Description
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Addition and removal of rules from chain bindings within the same transaction causes leads to use-after-free. We recommend upgrading past commit f15f29fd4779be8a418b66e9d52979bb6d6c2325.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Kernel
Default version status: unaffected
5.9 to < 6.6affected
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f15f29fd4779be8a418b66e9d52979bb6d6c2325 ↗
- https://kernel.dance/f15f29fd4779be8a418b66e9d52979bb6d6c2325 ↗
- http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html ↗
- https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html ↗