CVE-2024-0193

Katalog CVE

CVSS 6.7 · Medium EPSS 0,84%

Kerentanan Use After Free pada redhat codeready linux builder for eus, redhat codeready linux builder for ibm z systems eus +20 lainnya. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.

Rincian

Terbit di NVD

2 Januari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

0,84% peluang dieksploitasi; lebih tinggi dari 56,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/errata/RHSA-2024:1018 advisory vendor
• https://access.redhat.com/errata/RHSA-2024:1019 advisory vendor
• https://access.redhat.com/errata/RHSA-2024:1248 advisory vendor
• https://access.redhat.com/errata/RHSA-2024:2094 advisory vendor
• https://access.redhat.com/errata/RHSA-2024:4412 advisory vendor
• https://access.redhat.com/errata/RHSA-2024:4415 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2255653 issue tracking · patch · advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2024-0193 mitigasi · advisory pihak ketiga