Description
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
Metrics
CVSS 3.1 7.8/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| Siemens | SIMATIC S7-1500 TM MFP - GNU/Linux subsystem | < V1.1 |
References
- http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.htmlPatch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/05/15/5Mailing List, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2196105Issue Tracking, Mitigation, Third Party Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edabMailing List, Patch
- https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edabPatch
- https://lists.debian.org/debian-lts-announce/2023/06/msg00008.htmlThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/07/msg00030.htmlMailing List, Third Party Advisory
- https://news.ycombinator.com/item?id=35879660Issue Tracking
- https://security.netapp.com/advisory/ntap-20230616-0002/Mailing List, Third Party Advisory
- https://www.debian.org/security/2023/dsa-5402Mailing List, Third Party Advisory
- https://www.openwall.com/lists/oss-security/2023/05/08/4Mailing List, Patch, Third Party Advisory
- http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.htmlPatch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/05/15/5Mailing List, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2196105Issue Tracking, Mitigation, Third Party Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edabMailing List, Patch
- https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edabPatch
- https://lists.debian.org/debian-lts-announce/2023/06/msg00008.htmlThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/07/msg00030.htmlMailing List, Third Party Advisory
- https://news.ycombinator.com/item?id=35879660Issue Tracking
- https://security.netapp.com/advisory/ntap-20230616-0002/Mailing List, Third Party Advisory
- https://www.debian.org/security/2023/dsa-5402Mailing List, Third Party Advisory
- https://www.openwall.com/lists/oss-security/2023/05/08/4Mailing List, Patch, Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://cert-portal.siemens.com/productcert/html/ssa-806742.html
Timeline
- Published
- May 8, 2023
- Last modified
- Oct 15, 2026
- NVD status
- Modified