Skip to content
OpenAdvisories
High USN-6576-1 1 CVE

linux-oem-6.1 vulnerability

Published Jan 10, 2024 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Lonial Con discovered that the netfilter subsystem in the Linux kernel did
not properly handle an expired catchall element in some situations, leading
to a use-after-free vulnerability. A local attacker could use this to cause
a denial of service (system crash) or possibly execute arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS linux-oem-6.1 6.1.0-1028.28

Vulnerabilities 1

  • High 7.8
    CVE-2023-6111

    Use-after-free in Linux kernel's netfilter: nf_tables component

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_trans_gc_catchall did not remove the catchall set element from the catchall_list when the argument syn…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2023-6111