High severity7.8NVD Advisory· Published Jan 2, 2024· Updated Jun 17, 2026

CVE-2024-0193

Description

A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

123

SUSE S.A./Linux Enterprise Debuginfoinferred
Red Hat/Codeready Linux Builder For X86 64
cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:aarch64:*
Red Hat/Codeready Linux Builder For Eus5 versions
cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.2:*:*:*:*:*:x64:*+ 4 more
- cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.2:*:*:*:*:*:x64:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.4:*:*:*:*:*:arm64:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.4:*:*:*:*:*:x64:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.6:*:*:*:*:*:arm64:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.6:*:*:*:*:*:x64:*
Red Hat/Codeready Linux Builder For Ibm Z Systems
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*
Red Hat/Codeready Linux Builder For Ibm Z Systems Eus3 versions
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:*
Red Hat/Codeready Linux Builder For Arm64 Eus4 versions
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.2:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:*
Red Hat/Openshift Logging
cpe:2.3:a:redhat:openshift_logging:*:*:*:*:*:*:*:*
Range: >=5.0,<5.8.6
Linux/Kernel2 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.10.198,<5.10.206
- (no CPE)
Red Hat/Enterprise Linux Server3 versions
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:arm64:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:arm64:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:x64:*
- cpe:2.3:o:redhat:enterprise_linux:9.2:*:*:*:*:*:arm64:*
Red Hat/Enterprise Linux For Arm 643 versions
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.4_aarch64:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.6_aarch64:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Arm 64 Els2 versions
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_els:9.4_aarch64:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_els:9.4_aarch64:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_els:9.6_aarch64:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Ibm Z Systems Eus5 versions
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.6_aarch64:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Els4 versions
cpe:2.3:o:redhat:enterprise_linux_for_els:9.2:*:*:*:*:*:arm64:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux_for_els:9.2:*:*:*:*:*:arm64:*
- cpe:2.3:o:redhat:enterprise_linux_for_els:9.2:*:*:*:*:*:x64:*
- cpe:2.3:o:redhat:enterprise_linux_for_els:9.4:*:*:*:*:*:x64:*
- cpe:2.3:o:redhat:enterprise_linux_for_els:9.6:*:*:*:*:*:x64:*
Red Hat/Enterprise Linux For Eus4 versions
cpe:2.3:o:redhat:enterprise_linux_for_eus:9.2:*:*:*:*:*:arm64:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux_for_eus:9.2:*:*:*:*:*:arm64:*
- cpe:2.3:o:redhat:enterprise_linux_for_eus:9.2:*:*:*:*:*:x64:*
- cpe:2.3:o:redhat:enterprise_linux_for_eus:9.4:*:*:*:*:*:x64:*
- cpe:2.3:o:redhat:enterprise_linux_for_eus:9.6:*:*:*:*:*:x64:*
Red Hat/Enterprise Linux For Ibm Z Systems4 versions
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.4_s390x:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.6_s390x:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Ibm Z Systems Els3 versions
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.2:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.4_s390x:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.6_s390x:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Power Little Endian Els3 versions
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.2:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.4_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.6_ppc64le:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Power Little Endian Eus4 versions
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.0_ppc64le:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.0_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Update Services For Sap Solutions4 versions
cpe:2.3:o:redhat:enterprise_linux_for_update_services_for_sap_solutions:9.0:*:*:*:*:*:x64:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux_for_update_services_for_sap_solutions:9.0:*:*:*:*:*:x64:*
- cpe:2.3:o:redhat:enterprise_linux_for_update_services_for_sap_solutions:9.2:*:*:*:*:*:x64:*
- cpe:2.3:o:redhat:enterprise_linux_for_update_services_for_sap_solutions:9.4:*:*:*:*:*:x64:*
- cpe:2.3:o:redhat:enterprise_linux_for_update_services_for_sap_solutions:9.6:*:*:*:*:*:x64:*
Red Hat/Enterprise Linux Server Aus3 versions
cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:9.6:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions4 versions
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.0_ppc64le:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.0_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.4_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.6_ppc64le:*:*:*:*:*:*:*
osv-coords59 versions
pkg:apk/chainguard/hyperv-daemons pkg:apk/chainguard/hyperv-daemons-6.18 pkg:apk/chainguard/hyperv-daemons-generic pkg:apk/chainguard/linux-aws-6.12 pkg:apk/chainguard/linux-aws-6.12-boot-installed pkg:apk/chainguard/linux-aws-6.12-fips-boot-installed pkg:apk/chainguard/linux-aws-6.12-headers pkg:apk/chainguard/linux-aws-6.12-modules pkg:apk/chainguard/linux-aws-6.18 pkg:apk/chainguard/linux-aws-6.18-boot-installed pkg:apk/chainguard/linux-aws-6.18-fips-boot-installed pkg:apk/chainguard/linux-aws-6.18-headers pkg:apk/chainguard/linux-aws-6.18-modules pkg:apk/chainguard/linux-aws-generic pkg:apk/chainguard/linux-aws-generic-boot-configuration pkg:apk/chainguard/linux-aws-generic-boot-installed pkg:apk/chainguard/linux-aws-generic-fips-boot-installed pkg:apk/chainguard/linux-aws-generic-headers pkg:apk/chainguard/linux-aws-generic-modules pkg:apk/chainguard/linux-azure-6.18 pkg:apk/chainguard/linux-azure-6.18-boot-installed pkg:apk/chainguard/linux-azure-6.18-fips-boot-installed pkg:apk/chainguard/linux-azure-6.18-headers pkg:apk/chainguard/linux-azure-6.18-modules pkg:apk/chainguard/linux-azure-generic pkg:apk/chainguard/linux-azure-generic-boot-configuration pkg:apk/chainguard/linux-azure-generic-boot-installed pkg:apk/chainguard/linux-azure-generic-fips-boot-installed pkg:apk/chainguard/linux-azure-generic-headers pkg:apk/chainguard/linux-azure-generic-modules pkg:apk/chainguard/linux-gcp-6.18 pkg:apk/chainguard/linux-gcp-6.18-boot-installed pkg:apk/chainguard/linux-gcp-6.18-fips-boot-installed pkg:apk/chainguard/linux-gcp-6.18-headers pkg:apk/chainguard/linux-gcp-6.18-modules pkg:apk/chainguard/linux-gcp-generic pkg:apk/chainguard/linux-gcp-generic-boot-installed pkg:apk/chainguard/linux-gcp-generic-fips-boot-installed pkg:apk/chainguard/linux-gcp-generic-headers pkg:apk/chainguard/linux-gcp-generic-modules pkg:apk/chainguard/linux-qemu-6.12 pkg:apk/chainguard/linux-qemu-6.18 pkg:apk/chainguard/linux-qemu-generic pkg:apk/chainguard/linux-qemu-generic-boot-installed pkg:apk/chainguard/linux-qemu-generic-bootc-boot-installed pkg:apk/chainguard/linux-qemu-generic-fips-boot-installed pkg:apk/chainguard/linux-qemu-generic-headers pkg:apk/chainguard/linux-qemu-generic-modules pkg:apk/chainguard/linux-qemu-rc pkg:apk/chainguard/linux-qemu-rc-boot-installed pkg:apk/chainguard/linux-qemu-rc-fips-boot-installed pkg:apk/chainguard/linux-qemu-rc-headers pkg:apk/chainguard/linux-qemu-rc-modules pkg:apk/chainguard/linux-vmware-6.18 pkg:apk/chainguard/linux-vmware-generic pkg:apk/chainguard/linux-vmware-generic-boot-installed pkg:apk/chainguard/linux-vmware-generic-fips-boot-installed pkg:apk/chainguard/linux-vmware-generic-headers pkg:apk/chainguard/linux-vmware-generic-modules
< 6.16.6-r0+ 58 more
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.18.2-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 6.18.0-r0
- (no CPE)range: < 6.18.0-r0
- (no CPE)range: < 6.18.0-r0
- (no CPE)range: < 6.18.0-r0
- (no CPE)range: < 6.18.0-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.18.7-r0
- (no CPE)range: < 6.18.2-r0
- (no CPE)range: < 6.18.2-r0
- (no CPE)range: < 6.18.2-r0
- (no CPE)range: < 6.18.2-r0
- (no CPE)range: < 6.18.7-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.18.2-r0
- (no CPE)range: < 6.18.2-r0
- (no CPE)range: < 6.18.2-r0
- (no CPE)range: < 6.18.2-r0
- (no CPE)range: < 6.18.2-r0
- (no CPE)range: < 6.18.7-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.12.67-r0
- (no CPE)range: < 6.18.7-r0
- (no CPE)range: < 6.18.7-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.18.7-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.17_rc5-r0
- (no CPE)range: < 6.17_rc5-r0
- (no CPE)range: < 6.17_rc5-r0
- (no CPE)range: < 6.17_rc5-r0
- (no CPE)range: < 6.17_rc5-r0
- (no CPE)range: < 6.18.7-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.16.6-r0
- (no CPE)range: < 6.16.6-r0

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
access.redhat.com/errata/RHSA-2024:1018nvdVendor Advisory
access.redhat.com/errata/RHSA-2024:1019nvdVendor Advisory
access.redhat.com/errata/RHSA-2024:1248nvdVendor Advisory
access.redhat.com/errata/RHSA-2024:2094nvdVendor Advisory
access.redhat.com/errata/RHSA-2024:4412nvdVendor Advisory
access.redhat.com/errata/RHSA-2024:4415nvdVendor Advisory
access.redhat.com/security/cve/CVE-2024-0193nvdMitigationThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000