vulnti.work

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Due to a race condition between nf_tables netlink contro…

High CVSS 7.8
CVECVE-2023-4244
First seen2026-07-28 17:15 UTC
Disclosed2023-09-06 14:15 UTC
Last updated2026-07-28 17:15 UTC
Channel statusauto

Summary

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Due to a race condition between nf_tables netlink control plane transaction and nft_set element garbage collection, it is possible to underflow the reference counter causing a use-after-free vulnerability. We recommend upgrading past commit 3e91b0ebd994635df2346353322ac51ce84ce6d8.

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

  • :
  • :
Lint boundary warnings (2)

The following non-blocking warnings were raised during the lint phase of this triage (e.g. reference URLs not yet on the allowlist). They do not affect entry usability and are disclosed for transparency (see DR-002).

  • REF_URL_NOT_ALLOWLISTED url not in allowlist: https://kernel.dance/3e91b0ebd994635df2346353322ac51ce84ce6d8
  • REF_URL_NOT_ALLOWLISTED url not in allowlist: https://kernel.dance/3e91b0ebd994635df2346353322ac51ce84ce6d8

Sources

  • NVD DATABASE

Original Links

Timeline

  1. nvd_ingest NVD