Database/Kernel, userspace & hypervisor
Linux kernel (nf_tables): Use-after-free in nf_tables anonymous-set batch processing
Impact
Use-after-free in nf_tables anonymous-set batch processing - unprivileged local user to root, public exploit
Who can reach it
Any tenant process in a container with CAP_NET_ADMIN in a userns
What to do
Livepatchable; otherwise drain + reboot. Disable unprivileged user namespaces to blunt it
Fleet impact
How widespread
Universal - nf_tables is enabled by default in most distributions and every kernel through 6.3.1 is affected
Cost to remediate
node-reboot - kernel upgrade to 6.3.2+; mitigation is blocking CAP_NET_ADMIN/user namespaces, which many tenant workloads legitimately need
Why it hits the whole fleet
Use-after-free in nf_tables batch processing gives arbitrary kernel read/write and root from an unprivileged local user - in a container with a user namespace this is a straight escape to the GPU host
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.