CVE-2023-4244

HIGH7.8

Use-after-free in Linux kernel's netfilter: nf_tables component

Published Sep 6, 2023

Modified 11 months ago

Details

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.

Due to a race condition between nf_tables netlink control plane transaction and nft_set element garbage collection, it is possible to underflow the reference counter causing a use-after-free vulnerability.

We recommend upgrading past commit 3e91b0ebd994635df2346353322ac51ce84ce6d8.

References

FIXhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e91b0ebd994635df2346353322ac51ce84ce6d8 WEBhttps://kernel.dance/3e91b0ebd994635df2346353322ac51ce84ce6d8 WEBhttps://lists.debian.org/debian-lts-announce/2023/10/msg00027.html WEBhttps://lists.debian.org/debian-lts-announce/2024/01/msg00004.html ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2023-4244

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

Memory Safety

CWE-416

Use After Free

Ecosystems

Timeline

PublishedSep 6, 2023

ModifiedFeb 13, 2025