CVE-2024-0193

Опубликовано: 02 янв. 2024

Источник: nvd

CVSS3: 7.8

CVSS3: 6.7

EPSS Низкий

Описание

A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.

Ссылки

https://access.redhat.com/errata/RHSA-2024:1018
Vendor Advisory
https://access.redhat.com/errata/RHSA-2024:1019
Vendor Advisory
https://access.redhat.com/errata/RHSA-2024:1248
Vendor Advisory
https://access.redhat.com/errata/RHSA-2024:2094
Vendor Advisory
https://access.redhat.com/errata/RHSA-2024:4412
Vendor Advisory
https://access.redhat.com/errata/RHSA-2024:4415
Vendor Advisory
https://access.redhat.com/security/cve/CVE-2024-0193
Mitigation
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2255653
Issue Tracking
Patch
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:1018
Vendor Advisory
https://access.redhat.com/errata/RHSA-2024:1019
Vendor Advisory
https://access.redhat.com/errata/RHSA-2024:1248
Vendor Advisory
https://access.redhat.com/errata/RHSA-2024:2094
Vendor Advisory
https://access.redhat.com/errata/RHSA-2024:4412
Vendor Advisory
https://access.redhat.com/errata/RHSA-2024:4415
Vendor Advisory
https://access.redhat.com/security/cve/CVE-2024-0193
Mitigation
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2255653
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.2:*:*:*:*:*:x64:*

cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:*

cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:9.2:*:*:*:*:*:arm64:*

cpe:2.3:o:redhat:enterprise_linux_for_els:9.2:*:*:*:*:*:arm64:*

cpe:2.3:o:redhat:enterprise_linux_for_els:9.2:*:*:*:*:*:x64:*

cpe:2.3:o:redhat:enterprise_linux_for_eus:9.2:*:*:*:*:*:arm64:*

cpe:2.3:o:redhat:enterprise_linux_for_eus:9.2:*:*:*:*:*:x64:*

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_update_services_for_sap_solutions:9.2:*:*:*:*:*:x64:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:aarch64:*

cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.4:*:*:*:*:*:arm64:*

cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.4:*:*:*:*:*:x64:*

cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.6:*:*:*:*:*:arm64:*

cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.6:*:*:*:*:*:x64:*

cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*

cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:*

cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:*

cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*

cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:*

cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:arm64:*

cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:x64:*

cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.4_aarch64:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.6_aarch64:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_arm_64_els:9.4_aarch64:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_arm_64_els:9.6_aarch64:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.6_aarch64:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_els:9.4:*:*:*:*:*:x64:*

cpe:2.3:o:redhat:enterprise_linux_for_els:9.6:*:*:*:*:*:x64:*

cpe:2.3:o:redhat:enterprise_linux_for_eus:9.4:*:*:*:*:*:x64:*

cpe:2.3:o:redhat:enterprise_linux_for_eus:9.6:*:*:*:*:*:x64:*

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.4_s390x:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.6_s390x:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.4_s390x:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.6_s390x:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.4_ppc64le:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.6_ppc64le:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.0_ppc64le:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_update_services_for_sap_solutions:9.4:*:*:*:*:*:x64:*

cpe:2.3:o:redhat:enterprise_linux_for_update_services_for_sap_solutions:9.6:*:*:*:*:*:x64:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:9.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.4_ppc64le:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.6_ppc64le:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:redhat:enterprise_linux_for_update_services_for_sap_solutions:9.0:*:*:*:*:*:x64:*

Конфигурация 4

Одно из

cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_update_services_for_sap_solutions:9.0:*:*:*:*:*:x64:*

cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.0_ppc64le:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.10.198 (включая) до 5.10.206 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.15.118 (включая) до 5.15.146 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.1.35 (включая) до 6.1.71 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.3.9 (включая) до 6.6.10 (исключая)

Конфигурация 6

Одновременно

cpe:2.3:a:redhat:openshift_logging:*:*:*:*:*:*:*:*

Версия от 5.0 (включая) до 5.8.6 (исключая)

Одно из

cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:arm64:*

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 56%

0.00843

Низкий

7.8 High

CVSS3

6.7 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2024-0193

CVSS3: 7.8

ubuntu

больше 2 лет назад

CVE-2024-0193

CVSS3: 7.8

redhat

больше 2 лет назад

CVE-2024-0193

CVSS3: 7.8

debian

больше 2 лет назад

A use-after-free flaw was found in the netfilter subsystem of the Linu ...

GHSA-52x7-wcqq-wfjp

CVSS3: 7.8

github

больше 2 лет назад

BDU:2024-00096

CVSS3: 6.7

fstec

больше 2 лет назад

Уязвимость функции nft_set_commit_update() в модуле net/netfilter/nf_tables_api.c компонента netfilter ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации и повысить свои привилегии

EPSS

Процентиль: 56%

0.00843

Низкий

7.8 High

CVSS3

6.7 Medium

CVSS3

Дефекты

CWE-416