Vulnerability Intelligence

CVE-2024-0193

Medium 6.7

Published
Last modified
NVD status
Analyzed

Description

A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.

Affected products

redhat: codeready linux builder for eus; redhat: codeready linux builder for ibm z systems eus; redhat: codeready linux builder for power little endian eus; redhat: enterprise linux; redhat: enterprise linux for els; redhat: enterprise linux for eus; redhat: enterprise linux for ibm z systems; redhat: enterprise linux for ibm z systems els; redhat: enterprise linux for ibm z systems eus; redhat: enterprise linux for power little endian els; redhat: enterprise linux for power little endian eus; redhat: enterprise linux for update services for sap solutions; redhat: enterprise linux server aus; redhat: enterprise linux server for power little endian update services for sap solutions; redhat: codeready linux builder

References10

Metrics

CVSS 3.1
6.7 MEDIUM Score source: NVD CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS — exploit probability
1% percentile: 58 · as of 5 November 2026
CWE
CWE-416

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.

Request a pentest