Linux kernel (netfilter pipapo): UAF from improper element removal in nft_pipapo_remove() - local root

Impact

UAF from improper element removal in nft_pipapo_remove() - local root

Who can reach it

Any tenant process in a container with CAP_NET_ADMIN in a userns

What to do

Livepatchable; otherwise drain + reboot

References

Related entries

• Linux kernel (netfilter pipapo): Inactive elements mishandled in nft_pipapo_walk - use-after-free, local rootCVE-2023-6817 · Linux kernel (netfilter pipapo)High
• Linux kernel (nf_tables): UAF adding a rule with NFTA_RULE_CHAIN_ID - local rootCVE-2023-4147 · Linux kernel (nf_tables)High
• Linux kernel (net/sched hfsc): Use-after-free in sch_hfsc qdisc - local rootCVE-2023-4623 · Linux kernel (net/sched hfsc)High
• glibc (ld.so): Looney Tunables: buffer overflow in the ld.so GLIBC_TUNABLES parser - local root on default installsCVE-2023-4911 · glibc (ld.so)High
• Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): Missing or insufficient validation of user-suppliedCVE-2023-52678 · Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd)High
• Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): An out-of-bounds access in the amdkfd (KFD computeCVE-2023-52816 · Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd)High