Record status Published
Identifier year (not publication year) 2024
Source publication Jan 2, 2024
Source updated Mar 4, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation
A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
kernel
Vendor Unknown
Product Unknown
Platforms Unknown
Default status affected
Package kernel
Package collection https://git.kernel.org/pub/scm/linux/kernel
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 9
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Platforms Unknown
Default status affected
Package kernel
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:5.14.0-362.24.1.el9_3 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Platforms Unknown
Default status affected
Package kernel
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:5.14.0-362.24.1.el9_3 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Vendor Red Hat
Product Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Platforms Unknown
Default status affected
Package kernel
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:5.14.0-70.105.1.el9_0 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Vendor Red Hat
Product Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Platforms Unknown
Default status affected
Package kernel-rt
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:5.14.0-70.105.1.rt21.177.el9_0 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9.2 Extended Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 9.2 Extended Update Support
Platforms Unknown
Default status affected
Package kernel
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.2 Extended Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:5.14.0-284.55.1.el9_2 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 9.2 Extended Update Support
Vendor Red Hat
Product Red Hat Enterprise Linux 9.2 Extended Update Support
Platforms Unknown
Default status affected
Package kernel-rt
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat Enterprise Linux 9.2 Extended Update Support · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
0:5.14.0-284.55.1.rt14.340.el9_2 unaffectedrpm * Unavailable None listed
RHOL-5.8-RHEL-9
Vendor Red Hat
Product RHOL-5.8-RHEL-9
Platforms Unknown
Default status affected
Package openshift-logging/cluster-logging-operator-bundle
Package collection https://catalog.redhat.com/software/containers/
RHOL-5.8-RHEL-9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
v5.8.6-22 unaffectedrpm * Unavailable None listed
RHOL-5.8-RHEL-9
Vendor Red Hat
Product RHOL-5.8-RHEL-9
Platforms Unknown
Default status affected
Package openshift-logging/cluster-logging-rhel9-operator
Package collection https://catalog.redhat.com/software/containers/
RHOL-5.8-RHEL-9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
v5.8.6-11 unaffectedrpm * Unavailable None listed
RHOL-5.8-RHEL-9
Vendor Red Hat
Product RHOL-5.8-RHEL-9
Platforms Unknown
Default status affected
Package openshift-logging/elasticsearch6-rhel9
Package collection https://catalog.redhat.com/software/containers/
RHOL-5.8-RHEL-9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
v6.8.1-407 unaffectedrpm * Unavailable None listed
RHOL-5.8-RHEL-9
Vendor Red Hat
Product RHOL-5.8-RHEL-9
Platforms Unknown
Default status affected
Package openshift-logging/elasticsearch-operator-bundle
Package collection https://catalog.redhat.com/software/containers/
RHOL-5.8-RHEL-9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
v5.8.6-19 unaffectedrpm * Unavailable None listed
RHOL-5.8-RHEL-9
Vendor Red Hat
Product RHOL-5.8-RHEL-9
Platforms Unknown
Default status affected
Package openshift-logging/elasticsearch-proxy-rhel9
Package collection https://catalog.redhat.com/software/containers/
RHOL-5.8-RHEL-9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
v1.0.0-479 unaffectedrpm * Unavailable None listed
RHOL-5.8-RHEL-9
Vendor Red Hat
Product RHOL-5.8-RHEL-9
Platforms Unknown
Default status affected
Package openshift-logging/elasticsearch-rhel9-operator
Package collection https://catalog.redhat.com/software/containers/
RHOL-5.8-RHEL-9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
v5.8.6-7 unaffectedrpm * Unavailable None listed
RHOL-5.8-RHEL-9
Vendor Red Hat
Product RHOL-5.8-RHEL-9
Platforms Unknown
Default status affected
Package openshift-logging/eventrouter-rhel9
Package collection https://catalog.redhat.com/software/containers/
RHOL-5.8-RHEL-9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
v0.4.0-247 unaffectedrpm * Unavailable None listed
RHOL-5.8-RHEL-9
Vendor Red Hat
Product RHOL-5.8-RHEL-9
Platforms Unknown
Default status affected
Package openshift-logging/fluentd-rhel9
Package collection https://catalog.redhat.com/software/containers/
RHOL-5.8-RHEL-9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
v5.8.6-5 unaffectedrpm * Unavailable None listed
RHOL-5.8-RHEL-9
Vendor Red Hat
Product RHOL-5.8-RHEL-9
Platforms Unknown
Default status affected
Package openshift-logging/log-file-metric-exporter-rhel9
Package collection https://catalog.redhat.com/software/containers/
RHOL-5.8-RHEL-9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
v1.1.0-227 unaffectedrpm * Unavailable None listed
RHOL-5.8-RHEL-9
Vendor Red Hat
Product RHOL-5.8-RHEL-9
Platforms Unknown
Default status affected
Package openshift-logging/logging-curator5-rhel9
Package collection https://catalog.redhat.com/software/containers/
RHOL-5.8-RHEL-9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
v5.8.1-470 unaffectedrpm * Unavailable None listed
RHOL-5.8-RHEL-9
Vendor Red Hat
Product RHOL-5.8-RHEL-9
Platforms Unknown
Default status affected
Package openshift-logging/logging-loki-rhel9
Package collection https://catalog.redhat.com/software/containers/
RHOL-5.8-RHEL-9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
v2.9.6-14 unaffectedrpm * Unavailable None listed
RHOL-5.8-RHEL-9
Vendor Red Hat
Product RHOL-5.8-RHEL-9
Platforms Unknown
Default status affected
Package openshift-logging/logging-view-plugin-rhel9
Package collection https://catalog.redhat.com/software/containers/
RHOL-5.8-RHEL-9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
v5.8.6-2 unaffectedrpm * Unavailable None listed
RHOL-5.8-RHEL-9
Vendor Red Hat
Product RHOL-5.8-RHEL-9
Platforms Unknown
Default status affected
Package openshift-logging/loki-operator-bundle
Package collection https://catalog.redhat.com/software/containers/
RHOL-5.8-RHEL-9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
v5.8.6-24 unaffectedrpm * Unavailable None listed
RHOL-5.8-RHEL-9
Vendor Red Hat
Product RHOL-5.8-RHEL-9
Platforms Unknown
Default status affected
Package openshift-logging/loki-rhel9-operator
Package collection https://catalog.redhat.com/software/containers/
RHOL-5.8-RHEL-9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
v5.8.6-10 unaffectedrpm * Unavailable None listed
RHOL-5.8-RHEL-9
Vendor Red Hat
Product RHOL-5.8-RHEL-9
Platforms Unknown
Default status affected
Package openshift-logging/lokistack-gateway-rhel9
Package collection https://catalog.redhat.com/software/containers/
RHOL-5.8-RHEL-9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
v0.1.0-525 unaffectedrpm * Unavailable None listed
RHOL-5.8-RHEL-9
Vendor Red Hat
Product RHOL-5.8-RHEL-9
Platforms Unknown
Default status affected
Package openshift-logging/opa-openshift-rhel9
Package collection https://catalog.redhat.com/software/containers/
RHOL-5.8-RHEL-9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
v0.1.0-224 unaffectedrpm * Unavailable None listed
RHOL-5.8-RHEL-9
Vendor Red Hat
Product RHOL-5.8-RHEL-9
Platforms Unknown
Default status affected
Package openshift-logging/vector-rhel9
Package collection https://catalog.redhat.com/software/containers/
RHOL-5.8-RHEL-9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
v0.28.1-56 unaffectedrpm * Unavailable None listed
Red Hat Enterprise Linux 6
Vendor Red Hat
Product Red Hat Enterprise Linux 6
Platforms Unknown
Default status unaffected
Package kernel
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 7
Vendor Red Hat
Product Red Hat Enterprise Linux 7
Platforms Unknown
Default status unaffected
Package kernel
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 7
Vendor Red Hat
Product Red Hat Enterprise Linux 7
Platforms Unknown
Default status unaffected
Package kernel-rt
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 8
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Platforms Unknown
Default status unaffected
Package kernel
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 8
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Platforms Unknown
Default status unaffected
Package kernel-rt
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 9
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Platforms Unknown
Default status affected
Package kernel-rt
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.