Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation
Priority HIGH 69CWE-416Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 15 fixed, 1 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-416 and the CVSS impact.
Summary
A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00836 57th percentileScored 2026-11-07
Fix Partial Red Hat: 6 advisoriesRed Hat: 15 fixed, 1 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | kernel | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 5.14.0-362.24.1.el9_3 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 5.14.0-362.24.1.el9_3 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | — | 5.14.0-70.105.1.el9_0 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | — | 5.14.0-70.105.1.rt21.177.el9_0 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | — | 5.14.0-284.55.1.el9_2 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | — | 5.14.0-284.55.1.rt14.340.el9_2 | Patch available | CNA |
| Red Hat | RHOL-5.8-RHEL-9 | — | v5.8.6-22 | Patch available | CNA |
| Red Hat | RHOL-5.8-RHEL-9 | — | v5.8.6-11 | Patch available | CNA |
| Red Hat | RHOL-5.8-RHEL-9 | — | v6.8.1-407 | Patch available | CNA |
| Red Hat | RHOL-5.8-RHEL-9 | — | v5.8.6-19 | Patch available | CNA |
| Red Hat | RHOL-5.8-RHEL-9 | — | v1.0.0-479 | Patch available | CNA |
| Red Hat | RHOL-5.8-RHEL-9 | — | v5.8.6-7 | Patch available | CNA |
| Red Hat | RHOL-5.8-RHEL-9 | — | v0.4.0-247 | Patch available | CNA |
| Red Hat | RHOL-5.8-RHEL-9 | — | v5.8.6-5 | Patch available | CNA |
| Red Hat | RHOL-5.8-RHEL-9 | — | v1.1.0-227 | Patch available | CNA |
| Red Hat | RHOL-5.8-RHEL-9 | — | v5.8.1-470 | Patch available | CNA |
| Red Hat | RHOL-5.8-RHEL-9 | — | v2.9.6-14 | Patch available | CNA |
| Red Hat | RHOL-5.8-RHEL-9 | — | v5.8.6-2 | Patch available | CNA |
| Red Hat | RHOL-5.8-RHEL-9 | — | v5.8.6-24 | Patch available | CNA |
| Red Hat | RHOL-5.8-RHEL-9 | — | v5.8.6-10 | Patch available | CNA |
| Red Hat | RHOL-5.8-RHEL-9 | — | v0.1.0-525 | Patch available | CNA |
| Red Hat | RHOL-5.8-RHEL-9 | — | v0.1.0-224 | Patch available | CNA |
| Red Hat | RHOL-5.8-RHEL-9 | — | v0.28.1-56 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 6 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | No fix listed | CNA |
- kernel Vendor— Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 5.14.0-362.24.1.el9_3 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 5.14.0-362.24.1.el9_3 Patch available CNA
- Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 5.14.0-70.105.1.el9_0 Patch available CNA
- Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 5.14.0-70.105.1.rt21.177.el9_0 Patch available CNA
- Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 5.14.0-284.55.1.el9_2 Patch available CNA
- Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 5.14.0-284.55.1.rt14.340.el9_2 Patch available CNA
- RHOL-5.8-RHEL-9 VendorRed Hat Affected — Fixed in v5.8.6-22 Patch available CNA
- RHOL-5.8-RHEL-9 VendorRed Hat Affected — Fixed in v5.8.6-11 Patch available CNA
- RHOL-5.8-RHEL-9 VendorRed Hat Affected — Fixed in v6.8.1-407 Patch available CNA
- RHOL-5.8-RHEL-9 VendorRed Hat Affected — Fixed in v5.8.6-19 Patch available CNA
- RHOL-5.8-RHEL-9 VendorRed Hat Affected — Fixed in v1.0.0-479 Patch available CNA
- RHOL-5.8-RHEL-9 VendorRed Hat Affected — Fixed in v5.8.6-7 Patch available CNA
- RHOL-5.8-RHEL-9 VendorRed Hat Affected — Fixed in v0.4.0-247 Patch available CNA
- RHOL-5.8-RHEL-9 VendorRed Hat Affected — Fixed in v5.8.6-5 Patch available CNA
- RHOL-5.8-RHEL-9 VendorRed Hat Affected — Fixed in v1.1.0-227 Patch available CNA
- RHOL-5.8-RHEL-9 VendorRed Hat Affected — Fixed in v5.8.1-470 Patch available CNA
- RHOL-5.8-RHEL-9 VendorRed Hat Affected — Fixed in v2.9.6-14 Patch available CNA
- RHOL-5.8-RHEL-9 VendorRed Hat Affected — Fixed in v5.8.6-2 Patch available CNA
- RHOL-5.8-RHEL-9 VendorRed Hat Affected — Fixed in v5.8.6-24 Patch available CNA
- RHOL-5.8-RHEL-9 VendorRed Hat Affected — Fixed in v5.8.6-10 Patch available CNA
- RHOL-5.8-RHEL-9 VendorRed Hat Affected — Fixed in v0.1.0-525 Patch available CNA
- RHOL-5.8-RHEL-9 VendorRed Hat Affected — Fixed in v0.1.0-224 Patch available CNA
- RHOL-5.8-RHEL-9 VendorRed Hat Affected — Fixed in v0.28.1-56 Patch available CNA
- Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
CPE configurations NVD · 66
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.2:*:*:*:*:*:x64:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:* | 9.2_s390x | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:9.2:*:*:*:*:*:arm64:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_els:9.2:*:*:*:*:*:arm64:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_els:9.2:*:*:*:*:*:x64:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_eus:9.2:*:*:*:*:*:arm64:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_eus:9.2:*:*:*:*:*:x64:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:* | 9.2_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Red Hat |
- cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.2:*:*:*:*:*:x64:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:* Versions 9.2_s390x Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:9.2:*:*:*:*:*:arm64:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_els:9.2:*:*:*:*:*:arm64:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_els:9.2:*:*:*:*:*:x64:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_eus:9.2:*:*:*:*:*:arm64:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_eus:9.2:*:*:*:*:*:x64:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:* Versions 9.2_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
Show 56 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_update_services_for_sap_solutions:9.2:*:*:*:*:*:x64:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:* | 9.2 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:aarch64:* | 9.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.4:*:*:*:*:*:arm64:* | 9.4 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.4:*:*:*:*:*:x64:* | 9.4 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.6:*:*:*:*:*:arm64:* | 9.6 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.6:*:*:*:*:*:x64:* | 9.6 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:* | 9.0_s390x | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:* | 9.4_s390x | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:* | 9.6_s390x | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:* | 9.0_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:* | 9.4_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:* | 9.6_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:arm64:* | 9.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:x64:* | 9.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.4_aarch64:*:*:*:*:*:*:* | 9.4_aarch64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.6_aarch64:*:*:*:*:*:*:* | 9.6_aarch64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_arm_64_els:9.4_aarch64:*:*:*:*:*:*:* | 9.4_aarch64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_arm_64_els:9.6_aarch64:*:*:*:*:*:*:* | 9.6_aarch64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:*:*:*:*:*:*:* | 9.4_aarch64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.6_aarch64:*:*:*:*:*:*:* | 9.6_aarch64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_els:9.4:*:*:*:*:*:x64:* | 9.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_els:9.6:*:*:*:*:*:x64:* | 9.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_eus:9.4:*:*:*:*:*:x64:* | 9.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_eus:9.6:*:*:*:*:*:x64:* | 9.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:* | 9.0_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.4_s390x:*:*:*:*:*:*:* | 9.4_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.6_s390x:*:*:*:*:*:*:* | 9.6_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.4_s390x:*:*:*:*:*:*:* | 9.4_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.6_s390x:*:*:*:*:*:*:* | 9.6_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:* | 9.4_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:* | 9.6_s390x | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.4_ppc64le:*:*:*:*:*:*:* | 9.4_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.6_ppc64le:*:*:*:*:*:*:* | 9.6_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.0_ppc64le:*:*:*:*:*:*:* | 9.0_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:* | 9.4_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:* | 9.6_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_update_services_for_sap_solutions:9.4:*:*:*:*:*:x64:* | 9.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_update_services_for_sap_solutions:9.6:*:*:*:*:*:x64:* | 9.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:* | 9.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_aus:9.6:*:*:*:*:*:*:* | 9.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.4_ppc64le:*:*:*:*:*:*:* | 9.4_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.6_ppc64le:*:*:*:*:*:*:* | 9.6_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_update_services_for_sap_solutions:9.0:*:*:*:*:*:x64:* | 9.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:* | 9.0_aarch64 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.0_ppc64le:*:*:*:*:*:*:* | 9.0_ppc64le | Vulnerable | Red Hat |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.10.198 to before 5.10.206; 5.15.118 to before 5.15.146; 6.1.35 to before 6.1.71; 6.3.9 to before 6.6.10 | Vulnerable | Linux |
| cpe:2.3:a:redhat:openshift_logging:*:*:*:*:*:*:*:* | 5.0 to before 5.8.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* | 9.0 | Running on | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:arm64:* | 9.0 | Running on | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0:*:*:*:*:*:*:* | 9.0 | Running on | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0:*:*:*:*:*:*:* | 9.0 | Running on | Red Hat |
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_update_services_for_sap_solutions:9.2:*:*:*:*:*:x64:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:aarch64:* Versions 9.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.4:*:*:*:*:*:arm64:* Versions 9.4 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.4:*:*:*:*:*:x64:* Versions 9.4 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.6:*:*:*:*:*:arm64:* Versions 9.6 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.6:*:*:*:*:*:x64:* Versions 9.6 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:* Versions 9.0_s390x Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:* Versions 9.4_s390x Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:* Versions 9.6_s390x Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:* Versions 9.0_ppc64le Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:* Versions 9.4_ppc64le Vulnerable ·Red Hat
- cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:* Versions 9.6_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:arm64:* Versions 9.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:x64:* Versions 9.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.4_aarch64:*:*:*:*:*:*:* Versions 9.4_aarch64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.6_aarch64:*:*:*:*:*:*:* Versions 9.6_aarch64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_els:9.4_aarch64:*:*:*:*:*:*:* Versions 9.4_aarch64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_els:9.6_aarch64:*:*:*:*:*:*:* Versions 9.6_aarch64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:*:*:*:*:*:*:* Versions 9.4_aarch64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.6_aarch64:*:*:*:*:*:*:* Versions 9.6_aarch64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_els:9.4:*:*:*:*:*:x64:* Versions 9.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_els:9.6:*:*:*:*:*:x64:* Versions 9.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_eus:9.4:*:*:*:*:*:x64:* Versions 9.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_eus:9.6:*:*:*:*:*:x64:* Versions 9.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:* Versions 9.0_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.4_s390x:*:*:*:*:*:*:* Versions 9.4_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.6_s390x:*:*:*:*:*:*:* Versions 9.6_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.4_s390x:*:*:*:*:*:*:* Versions 9.4_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.6_s390x:*:*:*:*:*:*:* Versions 9.6_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:* Versions 9.4_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:* Versions 9.6_s390x Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.4_ppc64le:*:*:*:*:*:*:* Versions 9.4_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.6_ppc64le:*:*:*:*:*:*:* Versions 9.6_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.0_ppc64le:*:*:*:*:*:*:* Versions 9.0_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:* Versions 9.4_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:* Versions 9.6_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_update_services_for_sap_solutions:9.4:*:*:*:*:*:x64:* Versions 9.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_update_services_for_sap_solutions:9.6:*:*:*:*:*:x64:* Versions 9.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:* Versions 9.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_aus:9.6:*:*:*:*:*:*:* Versions 9.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.4_ppc64le:*:*:*:*:*:*:* Versions 9.4_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.6_ppc64le:*:*:*:*:*:*:* Versions 9.6_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_update_services_for_sap_solutions:9.0:*:*:*:*:*:x64:* Versions 9.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:* Versions 9.0_aarch64 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.0_ppc64le:*:*:*:*:*:*:* Versions 9.0_ppc64le Vulnerable ·Red Hat
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions 5.10.198 to before 5.10.206; 5.15.118 to before 5.15.146; 6.1.35 to before 6.1.71; 6.3.9 to before 6.6.10 Vulnerable ·Linux
- cpe:2.3:a:redhat:openshift_logging:*:*:*:*:*:*:*:* Versions 5.0 to before 5.8.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Running on ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:arm64:* Versions 9.0 Running on ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0:*:*:*:*:*:*:* Versions 9.0 Running on ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0:*:*:*:*:*:*:* Versions 9.0 Running on ·Red Hat
Remediation
Red Hat 6 advisories
- RHSA-2024:4415 Released 2024-07-09 · Red Hat rating Importantkernel security and bug fix update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) kernel-debug-devel-5.14.0-70.105.1.el9_0, kernel-debug-devel-matched-5.14.0-70.105.1.el9_0, kernel-devel-5.14.0-70.105.1.el9_0 +5
- Red Hat Enterprise Linux BaseOS E4S (v.9.0) bpftool-5.14.0-70.105.1.el9_0, kernel-5.14.0-70.105.1.el9_0, kernel-abi-stablelists-5.14.0-70.105.1.el9_0 +14
- RHSA-2024:4412 Released 2024-07-09 · Red Hat rating Importantkernel-rt security and bug fix update
- Red Hat Enterprise Linux NFV E4S (v.9.0) kernel-rt-5.14.0-70.105.1.rt21.177.el9_0, kernel-rt-core-5.14.0-70.105.1.rt21.177.el9_0, kernel-rt-debug-5.14.0-70.105.1.rt21.177.el9_0 +9
- Red Hat Enterprise Linux Real Time E4S (v.9.0) kernel-rt-5.14.0-70.105.1.rt21.177.el9_0, kernel-rt-core-5.14.0-70.105.1.rt21.177.el9_0, kernel-rt-debug-5.14.0-70.105.1.rt21.177.el9_0 +7
- RHSA-2024:2094 Released 2024-05-01 · Red Hat rating Moderatesecurity update Logging for Red Hat OpenShift - 5.8.6
- RHOL 5.8 for RHEL 9 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel9-operator, openshift-logging/elasticsearch-operator-bundle +14
Show 3 more Red Hat advisories
- RHSA-2024:1248 Released 2024-03-12 · Red Hat rating Importantkernel security update
- Red Hat CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-362.24.1.el9_3, libperf-5.14.0-362.24.1.el9_3
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-362.24.1.el9_3, kernel-64k-debug-devel-matched-5.14.0-362.24.1.el9_3, kernel-64k-devel-5.14.0-362.24.1.el9_3 +11
- Red Hat Enterprise Linux BaseOS (v. 9) bpftool-7.2.0-362.24.1.el9_3, kernel-5.14.0-362.24.1.el9_3, kernel-64k-5.14.0-362.24.1.el9_3 +29
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-362.24.1.el9_3, kernel-rt-core-5.14.0-362.24.1.el9_3, kernel-rt-debug-5.14.0-362.24.1.el9_3 +9
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-362.24.1.el9_3, kernel-rt-core-5.14.0-362.24.1.el9_3, kernel-rt-debug-5.14.0-362.24.1.el9_3 +11
- RHSA-2024:1018 Released 2024-02-28 · Red Hat rating Importantkernel security update
- Red Hat CodeReady Linux Builder EUS (v.9.2) kernel-tools-libs-devel-5.14.0-284.55.1.el9_2
- Red Hat Enterprise Linux AppStream EUS (v.9.2) kernel-64k-debug-devel-5.14.0-284.55.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.55.1.el9_2, kernel-64k-devel-5.14.0-284.55.1.el9_2 +10
- Red Hat Enterprise Linux BaseOS EUS (v.9.2) bpftool-7.0.0-284.55.1.el9_2, kernel-5.14.0-284.55.1.el9_2, kernel-64k-5.14.0-284.55.1.el9_2 +29
- RHSA-2024:1019 Released 2024-02-28 · Red Hat rating Importantkernel-rt security update
- Red Hat Enterprise Linux Real Time EUS (v.9.2) kernel-rt-5.14.0-284.55.1.rt14.340.el9_2, kernel-rt-core-5.14.0-284.55.1.rt14.340.el9_2, kernel-rt-debug-5.14.0-284.55.1.rt14.340.el9_2 +9
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2) kernel-rt-5.14.0-284.55.1.rt14.340.el9_2, kernel-rt-core-5.14.0-284.55.1.rt14.340.el9_2, kernel-rt-debug-5.14.0-284.55.1.rt14.340.el9_2 +11
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 9 | Affected | No fix yet |
| RHOL 5.8 for RHEL 9 | Fixed | RHSA-2024:2094 |
| Red Hat CodeReady Linux Builder (v. 9) | Fixed | RHSA-2024:1248 |
| Red Hat CodeReady Linux Builder EUS (v.9.2) | Fixed | RHSA-2024:1018 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2024:1248 |
| Red Hat Enterprise Linux AppStream E4S (v.9.0) | Fixed | RHSA-2024:4415 |
| Red Hat Enterprise Linux AppStream EUS (v.9.2) | Fixed | RHSA-2024:1018 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2024:1248 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.0) | Fixed | RHSA-2024:4415 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.2) | Fixed | RHSA-2024:1018 |
| Red Hat Enterprise Linux NFV E4S (v.9.0) | Fixed | RHSA-2024:4412 |
| Red Hat Enterprise Linux Real Time (v. 9) | Fixed | RHSA-2024:1248 |
| Red Hat Enterprise Linux Real Time E4S (v.9.0) | Fixed | RHSA-2024:4412 |
| Red Hat Enterprise Linux Real Time EUS (v.9.2) | Fixed | RHSA-2024:1019 |
| Red Hat Enterprise Linux Real Time for NFV (v. 9) | Fixed | RHSA-2024:1248 |
| Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2) | Fixed | RHSA-2024:1019 |
Not affected: 4 products
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux AppStream EUS (v.9.2)
Timeline
- 2026-10-02 Threatist record created from CVE-2024-0193
- 2026-10-03 Alias added: GHSA-52x7-wcqq-wfjp
References
More Red Hat Codeready Linux Builder vulnerabilities
- TI-2019-06284 Memory corruption in webkitgtk KEVCVSS 3.1HIGH 8.8
- TI-2023-04522 Glibc: buffer overflow in ld.so leading to privilege escalation KEVCVSS 3.1HIGH 7.8
- TI-2022-00753 A flaw was found in the way the "flags" member of the new pipe buffer structure was… KEVCVSS 3.1HIGH 7.8
- TI-2022-00413 Improper authentication in kernel KEVCVSS 3.1HIGH 7.8
- TI-2021-19843 Out-of-bounds read in Samba CVSS 3.1HIGH 8.8
- TI-2022-00359 Out-of-bounds write in kernel CVSS 3.1HIGH 8.8
Sources
- CVE-2024-0193 · CVE Program
- CVE-2024-0193 · NVD
- FIRST EPSS
- GHSA-52x7-wcqq-wfjp · GitHub Advisory Database · CC BY 4.0
- CVE-2024-0193 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences