UBUNTU-CVE-2024-0193
Dashboard / Vulnerabilities / UBUNTU-CVE-2024-0193
UBUNTU-CVE-2024-0193
Summary:
Details: A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.
References: https://ubuntu.com/security/CVE-2024-0193, https://access.redhat.com/security/cve/CVE-2024-0193, https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git/commit/?id=7315dc1e122c85ffdfc8defffbb8f8b616c2eb1a, https://ubuntu.com/security/notices/USN-6606-1, https://ubuntu.com/security/notices/USN-6607-1, https://ubuntu.com/security/notices/USN-6608-1, https://ubuntu.com/security/notices/USN-6609-1, https://ubuntu.com/security/notices/USN-6609-2, https://ubuntu.com/security/notices/USN-6609-3, https://ubuntu.com/security/notices/USN-6628-1, https://ubuntu.com/security/notices/USN-6608-2, https://ubuntu.com/security/notices/USN-6635-1, https://ubuntu.com/security/notices/USN-6628-2, https://www.cve.org/CVERecord?id=CVE-2024-0193
Affected packages
Package
Name: linux-hwe-edge
Purl: pkg:deb/ubuntu/linux-hwe-edge?arch=source&distro=xenial
Affected ranges
Type: ECOSYSTEM
Events:
