Dashboard / CVE-2024-0193

CVE-2024-0193

HIGH
MEDIUM Priority: 0.07 BB Relevance: 41/100
Published: 2024-01-02 Modified: 2026-11-04 First seen: 2026-11-04 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.

Weakness Classification (1)

Affected Software (62)

VendorProductVersion
linux linux_kernel 5.10.198 – 5.10.206
redhat codeready_linux_builder 9.0
redhat codeready_linux_builder_for_eus 9.2
redhat codeready_linux_builder_for_eus 9.4
redhat codeready_linux_builder_for_eus 9.4
redhat codeready_linux_builder_for_eus 9.6
redhat codeready_linux_builder_for_eus 9.6
redhat codeready_linux_builder_for_ibm_z_systems 9.0_s390x
redhat codeready_linux_builder_for_ibm_z_systems_eus 9.2_s390x
redhat codeready_linux_builder_for_ibm_z_systems_eus 9.4_s390x
redhat codeready_linux_builder_for_ibm_z_systems_eus 9.6_s390x
redhat codeready_linux_builder_for_power_little_endian 9.0_ppc64le
redhat codeready_linux_builder_for_power_little_endian_eus 9.2
redhat codeready_linux_builder_for_power_little_endian_eus 9.4_ppc64le
redhat codeready_linux_builder_for_power_little_endian_eus 9.6_ppc64le
redhat enterprise_linux 9.2
redhat enterprise_linux 9.0
redhat enterprise_linux 9.0
redhat enterprise_linux_for_arm_64 9.4_aarch64
redhat enterprise_linux_for_arm_64 9.6_aarch64
redhat enterprise_linux_for_arm_64 9.0_aarch64
redhat enterprise_linux_for_arm_64_els 9.4_aarch64
redhat enterprise_linux_for_arm_64_els 9.6_aarch64
redhat enterprise_linux_for_arm_64_eus 9.4_aarch64
redhat enterprise_linux_for_arm_64_eus 9.6_aarch64
redhat enterprise_linux_for_els 9.2
redhat enterprise_linux_for_els 9.2
redhat enterprise_linux_for_els 9.4
redhat enterprise_linux_for_els 9.6
redhat enterprise_linux_for_eus 9.2
Showing 30 of 62 entries

References & Advisories (8)

https://bugzilla.redhat.com/show_bug.cgi?id=2255653
Issue Tracking Patch Third Party Advisory

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.84%
Raw Score 0.008360
Percentile 57.9%
Date 2026-11-05

EPSS Trend

2026-11-05
0.00836
2026-11-04
0.00836

Intelligence Sources

mitre ref →
nvd ref →

External Links