Research · Jan 31, 2024 · ZeroDay Catalog
Critical Use-After-Free Vulnerability Identified in Linux Kernel's Netfilter Component
A significant use-after-free vulnerability in the Linux kernel's netfilter component has been discovered, allowing for potential local privilege escalation.
What changed
- The vulnerability arises when positive values are allowed as drop error within the hook verdict.
- The nf_hook_slow() function can lead to a double free vulnerability when NF_DROP is issued with a drop error that resembles NF_ACCEPT.
- Upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660 is essential to mitigate this risk.
Who is affected
- NetApp users, particularly those running the h300s firmware.
- Organizations relying on Linux-based systems for critical infrastructure.
- Developers and administrators managing Linux kernel deployments.
- Any entity that utilizes the netfilter component for network packet filtering.
What to do
- Upgrade the Linux kernel to a version beyond commit f342de4e2f33e0e39165d8639387aa6c19dff660.
- Review system configurations and assess the potential impact of the vulnerability.
- Monitor for any unusual activity that may indicate exploitation attempts.
- Stay informed about further updates from the Linux kernel development community.