In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged l…
High CVSS 7.8
Summary
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
- :
Sources
- NVD DATABASE
Original Links
- http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html Patch
- http://www.openwall.com/lists/oss-security/2023/05/15/5 Mailing List
- https://bugzilla.redhat.com/show_bug.cgi?id=2196105 Issue Tracking
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab Mailing List
- https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab Patch
- https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing List
- https://news.ycombinator.com/item?id=35879660 Issue Tracking
- https://security.netapp.com/advisory/ntap-20230616-0002/ Mailing List
- https://www.debian.org/security/2023/dsa-5402 Mailing List
- https://www.openwall.com/lists/oss-security/2023/05/08/4 Mailing List
- http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html Patch
- http://www.openwall.com/lists/oss-security/2023/05/15/5 Mailing List
- https://bugzilla.redhat.com/show_bug.cgi?id=2196105 Issue Tracking
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab Mailing List
- https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab Patch
- https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing List
- https://news.ycombinator.com/item?id=35879660 Issue Tracking
- https://security.netapp.com/advisory/ntap-20230616-0002/ Mailing List
- https://www.debian.org/security/2023/dsa-5402 Mailing List
- https://www.openwall.com/lists/oss-security/2023/05/08/4 Mailing List
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://cert-portal.siemens.com/productcert/html/ssa-806742.html
Timeline
- nvd_ingest NVD