Skip to content
OpenAdvisories
High 1 exploited CVE ELSA-2024-12260 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

Published Apr 2, 2024 · Updated Apr 2, 2024

Ecosystem: Oracle Linux

Summary

[5.4.17-2136.329.3.2.el8]
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal)
[Orabug: 36465920] {CVE-2024-1086}

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 kernel-uek-container 0:5.4.17-2136.329.3.2.el8
Oracle Linux · 8 kernel-uek-container-debug 0:5.4.17-2136.329.3.2.el8

Vulnerabilities 1

  • High 7.8
    CVE-2024-1086 Exploited · Ransomware Public exploit EPSS 28%

    Use-after-free in Linux kernel's netfilter: nf_tables component

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slo…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV May 30, 2024