CVEvulnerability
CVE-2023-32233
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-05-08
- Last modified
- 2026-10-15
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-416
Description
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
Affected configurations
• linux linux kernel (>= 3.13 < 4.14.315)
• linux linux kernel (>= 4.15 < 4.19.283)
• linux linux kernel (>= 4.20 < 5.4.243)
• linux linux kernel (>= 5.5 < 5.10.180)
• linux linux kernel (>= 5.11 < 5.15.111)
• linux linux kernel (>= 5.16 < 6.1.28)
• linux linux kernel (>= 6.2 < 6.2.15)
• linux linux kernel (>= 6.3 < 6.3.2)
• redhat enterprise linux 7.0
• redhat enterprise linux 8.0
• redhat enterprise linux 9.0
• netapp hci baseboard management controller h300s
• netapp hci baseboard management controller h410c
• netapp hci baseboard management controller h410s
• netapp hci baseboard management controller h500s
• netapp hci baseboard management controller h700s
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/05/15/5 Mailing List, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2196105 Issue Tracking, Mitigation, Third Party Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab Mailing List, Patch
- https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab Patch
- https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing List, Third Party Advisory
- https://news.ycombinator.com/item?id=35879660 Issue Tracking
- https://security.netapp.com/advisory/ntap-20230616-0002/ Mailing List, Third Party Advisory
- https://www.debian.org/security/2023/dsa-5402 Mailing List, Third Party Advisory
- https://www.openwall.com/lists/oss-security/2023/05/08/4 Mailing List, Patch, Third Party Advisory
- http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/05/15/5 Mailing List, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2196105 Issue Tracking, Mitigation, Third Party Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab Mailing List, Patch
- https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab Patch
- https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing List, Third Party Advisory
- https://news.ycombinator.com/item?id=35879660 Issue Tracking
- https://security.netapp.com/advisory/ntap-20230616-0002/ Mailing List, Third Party Advisory
- https://www.debian.org/security/2023/dsa-5402 Mailing List, Third Party Advisory
- https://www.openwall.com/lists/oss-security/2023/05/08/4 Mailing List, Patch, Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html cert-portal.siemens.com
- https://cert-portal.siemens.com/productcert/html/ssa-806742.html cert-portal.siemens.com