Strix
26.1K

CVE-2024-0193

MEDIUMCVSS 6.7/10EPSS 0.84%

Last modified

CVE-2024-0193 is a medium-severity vulnerability rated 6.7/10 on the CVSS scale. A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. EPSS estimates a 0.84% chance of exploitation in the next 30 days.

Description

A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.

Metrics

CVSS 3.1
6.7/10

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.84%

53.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
RedhatCodeready Linux Builder For Eus9.2
RedhatCodeready Linux Builder For Ibm Z Systems Eus9.2_s390x
RedhatCodeready Linux Builder For Power Little Endian Eus9.2
RedhatEnterprise Linux9.2
RedhatEnterprise Linux For Els9.2
RedhatEnterprise Linux For Eus9.2
RedhatEnterprise Linux For Ibm Z Systems9.2_s390x
RedhatEnterprise Linux For Ibm Z Systems Els9.2
RedhatEnterprise Linux For Ibm Z Systems Eus9.2
RedhatEnterprise Linux For Power Little Endian Els9.2
RedhatEnterprise Linux For Power Little Endian Eus9.2
RedhatEnterprise Linux For Update Services For Sap Solutions9.2
RedhatEnterprise Linux Server Aus9.2
RedhatEnterprise Linux Server For Power Little Endian Update Services For Sap Solutions9.2
RedhatCodeready Linux Builder9.0
RedhatCodeready Linux Builder For Eus9.4
RedhatCodeready Linux Builder For Eus9.6
RedhatCodeready Linux Builder For Ibm Z Systems9.0_s390x
RedhatCodeready Linux Builder For Ibm Z Systems Eus9.4_s390x
RedhatCodeready Linux Builder For Ibm Z Systems Eus9.6_s390x
RedhatCodeready Linux Builder For Power Little Endian9.0_ppc64le
RedhatCodeready Linux Builder For Power Little Endian Eus9.4_ppc64le
RedhatCodeready Linux Builder For Power Little Endian Eus9.6_ppc64le
RedhatEnterprise Linux9.0
RedhatEnterprise Linux For Arm 649.4_aarch64
RedhatEnterprise Linux For Arm 649.6_aarch64
RedhatEnterprise Linux For Arm 64 Els9.4_aarch64
RedhatEnterprise Linux For Arm 64 Els9.6_aarch64
RedhatEnterprise Linux For Arm 64 Eus9.4_aarch64
RedhatEnterprise Linux For Arm 64 Eus9.6_aarch64
RedhatEnterprise Linux For Els9.4
RedhatEnterprise Linux For Els9.6
RedhatEnterprise Linux For Eus9.4
RedhatEnterprise Linux For Eus9.6
RedhatEnterprise Linux For Ibm Z Systems9.0_s390x
RedhatEnterprise Linux For Ibm Z Systems9.4_s390x
RedhatEnterprise Linux For Ibm Z Systems9.6_s390x
RedhatEnterprise Linux For Ibm Z Systems Els9.4_s390x
RedhatEnterprise Linux For Ibm Z Systems Els9.6_s390x
RedhatEnterprise Linux For Ibm Z Systems Eus9.4_s390x
RedhatEnterprise Linux For Ibm Z Systems Eus9.6_s390x
RedhatEnterprise Linux For Power Little Endian Els9.4_ppc64le
RedhatEnterprise Linux For Power Little Endian Els9.6_ppc64le
RedhatEnterprise Linux For Power Little Endian Eus9.0_ppc64le
RedhatEnterprise Linux For Power Little Endian Eus9.4_ppc64le
RedhatEnterprise Linux For Power Little Endian Eus9.6_ppc64le
RedhatEnterprise Linux For Update Services For Sap Solutions9.4
RedhatEnterprise Linux For Update Services For Sap Solutions9.6
RedhatEnterprise Linux Server Aus9.4
RedhatEnterprise Linux Server Aus9.6

Showing 50 of 60 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Analyzed

Frequently Asked Questions

What is CVE-2024-0193?
A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.
How severe is CVE-2024-0193?
CVE-2024-0193 has a CVSS score of 6.7/10 (MEDIUM severity). The EPSS model estimates a 0.84% probability of exploitation in the next 30 days.
How do I fix CVE-2024-0193?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2024-0193?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST