CVEvulnerability
CVE-2023-4015
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-09-06
- Last modified
- 2026-10-14
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-416
Description
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
On an error when building a nftables rule, deactivating immediate expressions in nft_immediate_deactivate() can lead unbinding the chain and objects be deactivated but later used.
We recommend upgrading past commit 0a771f7b266b02d262900c75f1e175c7fe76fec2.
Affected configurations
• linux linux kernel (>= 5.9 < 5.10.190)
• linux linux kernel (>= 5.11 < 5.15.124)
• linux linux kernel (>= 5.16 < 6.1.43)
• linux linux kernel (>= 6.2 < 6.4.8)
• debian debian linux 12.0
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0a771f7b266b02d262900c75f1e175c7fe76fec2 Issue Tracking, Mailing List, Patch, Vendor Advisory
- https://kernel.dance/0a771f7b266b02d262900c75f1e175c7fe76fec2 Patch, Vendor Advisory
- https://www.debian.org/security/2023/dsa-5492 Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0a771f7b266b02d262900c75f1e175c7fe76fec2 Issue Tracking, Mailing List, Patch, Vendor Advisory
- https://kernel.dance/0a771f7b266b02d262900c75f1e175c7fe76fec2 Patch, Vendor Advisory
- https://www.debian.org/security/2023/dsa-5492 Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html cert-portal.siemens.com
- https://cert-portal.siemens.com/productcert/html/ssa-831302.html cert-portal.siemens.com