Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
None
Privileges Required
High
Attack Vector
Local
0

CVE-2024-0193

Disclosure Date: January 02, 2024 •
CVE-2024-0193 CVSS v3 Base Score: 6.7
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics
Base Score:
6.7 Medium
Impact Score:
5.9
Exploitability Score:
0.8
Vector:
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector (AV):
Local
Attack Complexity (AC):
Low
Privileges Required (PR):
High
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
High
Integrity (I):
High
Availability (A):
High

General Information

Offensive Application
Unknown
Utility Class
Unknown
Ports
Unknown
OS
Unknown
Vulnerable Versions
Red Hat Enterprise Linux 9 not down converted
Red Hat Enterprise Linux 9 not down converted
Red Hat Enterprise Linux 9 not down converted
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions not down converted
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions not down converted
Red Hat Enterprise Linux 9.2 Extended Update Support not down converted
Red Hat Enterprise Linux 9.2 Extended Update Support not down converted
RHOL-5.8-RHEL-9 not down converted
RHOL-5.8-RHEL-9 not down converted
RHOL-5.8-RHEL-9 not down converted
RHOL-5.8-RHEL-9 not down converted
RHOL-5.8-RHEL-9 not down converted
RHOL-5.8-RHEL-9 not down converted
RHOL-5.8-RHEL-9 not down converted
RHOL-5.8-RHEL-9 not down converted
RHOL-5.8-RHEL-9 not down converted
RHOL-5.8-RHEL-9 not down converted
RHOL-5.8-RHEL-9 not down converted
RHOL-5.8-RHEL-9 not down converted
RHOL-5.8-RHEL-9 not down converted
RHOL-5.8-RHEL-9 not down converted
RHOL-5.8-RHEL-9 not down converted
RHOL-5.8-RHEL-9 not down converted
RHOL-5.8-RHEL-9 not down converted
Red Hat Enterprise Linux 6 not down converted
Red Hat Enterprise Linux 7 not down converted
Red Hat Enterprise Linux 7 not down converted
Red Hat Enterprise Linux 8 not down converted
Red Hat Enterprise Linux 8 not down converted
Prerequisites
Unknown
Discovered By
Unknown
PoC Author
Unknown
Metasploit Module
Unknown
Reporter
Unknown

Vendors

  • linux,
  • redhat

Products

  • enterprise linux 9.0,
  • linux kernel -
Technical Analysis