● CVE — High
CVE-2024-0193
Vendorlinux, redhatProductlinux kernel, enterprise linux, enterprise linux for arm 64, enterprise linux for arm 64 eus, enterprise linux for ibm z systems, enterprise linux for ibm z systems eus, enterprise linux for power little endian eus, enterprise linux server aus, enterprise linux server for power little endian update services for sap solutions, codeready linux builder, codeready linux builder for power little endian eus, codeready linux builder for ibm z systems, codeready linux builder for power little endian, openshift logging, codeready linux builder for ibm z systems eus, codeready linux builder for eus, enterprise linux for arm 64 els, enterprise linux for els, enterprise linux for eus, enterprise linux for ibm z systems els, enterprise linux for power little endian els, enterprise linux for update services for sap solutionsDiscoveredJan 2, 2024UpdatedJun 5, 2026
A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.