Vulnerability of the __rtnl_newlink() function (net/core/rtnetlink.c) in the Linux operating system kernel, which allows a hacker to increase their privileges

🗓️ 23 Oct 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

A use-after-free in the __rtnl_newlink function allows privilege escalation in the kernel.

Reporter	Title	Published	Views	Family All 67
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2-2022-1761 (ALAS-2022-1761)	8 Mar 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-011 (ALASKERNEL-5.10-2022-011)	2 May 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-023 (ALASKERNEL-5.4-2022-023)	24 May 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : kernel (EulerOS-SA-2024-2369)	12 Sep 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : kernel (EulerOS-SA-2024-2394)	12 Sep 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2024-2519)	9 Oct 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2024-2544)	9 Oct 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.12.1 : kernel (EulerOS-SA-2024-2763)	27 Oct 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2024-2781)	27 Oct 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2025-1123)	21 Jan 202500:00	–	nessus

Vulners

Node

novell opensuse_leapMatch15.5

OR

red_hat red_hat_enterprise_linuxMatch8

OR

novell suse_linux_enterprise_server_for_sap_applicationsMatch15

OR

novell suse_linux_enterprise_serverMatch15-ltss

OR

novell opensuse_leapMatch15.3

OR

novell opensuse_leapMatch15.4

OR

novell suse_linux_enterprise_serverMatch15

OR

red_hat red_hat_enterprise_linuxMatch9

OR

novell suse_linux_enterprise_desktopMatch15

OR

novell opensuse_leapMatch15.6

Source	Link
git	www.git.kernel.org/stable/c/2cf180360d66bd657e606c1217e0e668e6faa303
git	www.git.kernel.org/stable/c/36a9a0aee881940476b254e0352581401b23f210
git	www.git.kernel.org/stable/c/3bbe2019dd12b8d13671ee6cda055d49637b4c39
git	www.git.kernel.org/stable/c/7d9211678c0f0624f74cdff36117ab8316697bb8
git	www.git.kernel.org/stable/c/a01e60a1ec6bef9be471fb7182a33c6d6f124e93
git	www.git.kernel.org/stable/c/bd43771ee9759dd9dfae946bff190e2c5a120de5
git	www.git.kernel.org/stable/c/c6f6f2444bdbe0079e41914a35081530d0409963
git	www.git.kernel.org/stable/c/def5e7070079b2a214b3b1a2fbec623e6fbfe34a
cve	www.cve.org/CVERecord
git	www.git.kernel.org/linus/c6f6f2444bdbe0079e41914a35081530d0409963

31 Jan 2025 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 26.8

CVSS 37.8

EPSS0.00239

use after free privilege escalation kernel vulnerability rtnl newlink linux kernel