CVE-2024-0193

MediumCVSS 6.7/10Last modified Nov 4, 2026

Description

A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
———
Red HatRed Hat Enterprise Linux 9—
Red HatRed Hat Enterprise Linux 9—
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions—
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions—
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support—
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRed Hat Enterprise Linux 6—
Red HatRed Hat Enterprise Linux 7—
Red HatRed Hat Enterprise Linux 7—
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat Enterprise Linux 9—

References

Timeline

Published
Jan 2, 2024
Last modified
Nov 4, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-01949.8A vulnerability, which was classified as critical, has been found in CodeAstro Internet Banking System up to 1.0. This issue affects some unCVE-2024-01959.8A vulnerability, which was classified as critical, was found in spider-flow 0.4.3. Affected is the function FunctionService.saveFunction of CVE-2024-01968.8A vulnerability has been found in Magic-Api up to 2.0.1 and classified as critical. Affected by this vulnerability is an unknown functionaliCVE-2024-01977.8A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level vCVE-2024-01998.0An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 pCVE-2024-02009.8An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection. This vulnerability coCVE-2024-02014.3The Product Expiry for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability checkCVE-2024-02025.9A security vulnerability has been identified in the cryptlib cryptographic library when cryptlib is compiled with the support for RSA key exCVE-2024-02038.8The Digits plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.4.1. This is due to missing CVE-2024-02049.8Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration pCVE-2024-02067.8A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an authenticated local usCVE-2024-02077.5HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
CVE-2024-0193: Medium severity, CVSS 6.7 | Vulnix