CVE-2023-3610

HighCVSS 7.8/10Last modified Oct 14, 2026

Description

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.

Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.

We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
Linux	Kernel	>= 5.9, < 6.4
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	< V1.1

References

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=4bedf9eee016286c835e3d8fa981ddece5338795Mailing List, Patch, Vendor Advisory
https://kernel.dance/4bedf9eee016286c835e3d8fa981ddece5338795Patch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/08/msg00001.htmlMailing List, Third Party Advisory
https://security.netapp.com/advisory/ntap-20230818-0005/Third Party Advisory, VDB Entry
https://www.debian.org/security/2023/dsa-5461Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=4bedf9eee016286c835e3d8fa981ddece5338795Mailing List, Patch, Vendor Advisory
https://kernel.dance/4bedf9eee016286c835e3d8fa981ddece5338795Patch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/08/msg00001.htmlMailing List, Third Party Advisory
https://security.netapp.com/advisory/ntap-20230818-0005/Third Party Advisory, VDB Entry
https://www.debian.org/security/2023/dsa-5461Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-831302.html

Timeline

Published: Jul 21, 2023
Last modified: Oct 14, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-361009.8An issue was discovered in IceCMS version 2.0.1, allows attackers to escalate privileges and gain sensitive information via UserID parameter CVE-2023-361039.8Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands CVE-2023-361067.5An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the inte CVE-2023-361099.8Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecma_stringbuilder_append_ra CVE-2023-36117.8An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalati CVE-2023-361185.4Cross Site Scripting vulnerability in Faculty Evaulation System using PHP/MySQLi v.1.0 allows an attacker to execute arbitrary code via a cr CVE-2023-36128.8Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an URL to a specially cr CVE-2023-361215.4Cross Site Scripting vulnerability in e107 v.2.3.2 allows a remote attacker to execute arbitrary code via the description function in the SE CVE-2023-361237.8Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version Alpha 1.3.9, allows local attackers to execute arbitrary code CVE-2023-361266.1There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Appointment Scheduler v3.0 CVE-2023-361277.5User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during password recovery, where a difference in mess CVE-2023-36133.5Mattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing guest accounts to