CVE-2024-0193

HIGH

Linux Kernel - Use-After-Free in Netfilter Pipapo Set Handling

Title source: llm
STIX 2.1

Description

A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.

References (8)

Core 8
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:1018
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:1019
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:1248
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:2094
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:4412
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:4415
Mitigation, Third Party Advisory vdb-entry x_refsource_redhat
https://access.redhat.com/security/cve/CVE-2024-0193
Issue Tracking, Patch, Third Party Advisory issue-tracking x_refsource_redhat
https://bugzilla.redhat.com/show_bug.cgi?id=2255653

Scores

CVSS v3 7.8
EPSS 0.0014
EPSS Percentile 34.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-416
Status published
Products (50)
linux/linux_kernel
linux/linux_kernel 5.10.198 - 5.10.206
redhat/codeready_linux_builder_for_arm64 9.0_aarch64
redhat/codeready_linux_builder_for_arm64_eus 9.4_aarch64
redhat/codeready_linux_builder_for_arm64_eus 9.6_aarch64
redhat/codeready_linux_builder_for_ibm_z_systems 9.0_s390x
redhat/codeready_linux_builder_for_ibm_z_systems_eus 9.2_s390x
redhat/codeready_linux_builder_for_ibm_z_systems_eus 9.4_s390x
redhat/codeready_linux_builder_for_ibm_z_systems_eus 9.6_s390x
redhat/codeready_linux_builder_for_power_little_endian 9.0_ppc64le
... and 40 more
Published Jan 02, 2024
Tracked Since Feb 18, 2026