CVE-2024-0193 in Linuxinfo

Zusammenfassung

von MITRE • 02.01.2024

A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Zuständig

Red Hat, Inc.

Reservieren

02.01.2024

Veröffentlichung

02.01.2024

Moderieren

akzeptiert

Eintrag

VDB-249513

CPE

bereit

EPSS

0.00843

KEV

nein

Aktivitäten

very low

Quellen

Might our Artificial Intelligence support you?

Check our Alexa App!