In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged l…
高危 CVSS 7.8
摘要
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
受影响产品
- :
- :
- :
数据来源
- NVD DATABASE
原始链接
- http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html Patch
- http://www.openwall.com/lists/oss-security/2023/05/15/5 Mailing List
- https://bugzilla.redhat.com/show_bug.cgi?id=2196105 Issue Tracking
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab Mailing List
- https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab Patch
- https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing List
- https://news.ycombinator.com/item?id=35879660 Issue Tracking
- https://security.netapp.com/advisory/ntap-20230616-0002/ Mailing List
- https://www.debian.org/security/2023/dsa-5402 Mailing List
- https://www.openwall.com/lists/oss-security/2023/05/08/4 Mailing List
- http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html Patch
- http://www.openwall.com/lists/oss-security/2023/05/15/5 Mailing List
- https://bugzilla.redhat.com/show_bug.cgi?id=2196105 Issue Tracking
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab Mailing List
- https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab Patch
- https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing List
- https://news.ycombinator.com/item?id=35879660 Issue Tracking
- https://security.netapp.com/advisory/ntap-20230616-0002/ Mailing List
- https://www.debian.org/security/2023/dsa-5402 Mailing List
- https://www.openwall.com/lists/oss-security/2023/05/08/4 Mailing List
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://cert-portal.siemens.com/productcert/html/ssa-806742.html
时间线
- nvd_ingest NVD