CVE-2023-4244

HighCVSS 7.0/10Last modified Jul 30, 2026

Description

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.

Due to a race condition between nf_tables netlink control plane transaction and nft_set element garbage collection, it is possible to underflow the reference counter causing a use-after-free vulnerability.

We recommend upgrading past commit 3e91b0ebd994635df2346353322ac51ce84ce6d8.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
Linux	Kernel	>= 0.0, < 4.19.316; >= 4.20, < 5.4.262; >= 5.5, < 5.10.198; >= 5.11, < 5.15.134; >= 5.16, < 6.1.56; >= 6.2, < 6.4.11

References

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e91b0ebd994635df2346353322ac51ce84ce6d8Issue Tracking, Mailing List, Patch, Vendor Advisory
https://kernel.dance/3e91b0ebd994635df2346353322ac51ce84ce6d8Patch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/01/msg00004.htmlMailing List, Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e91b0ebd994635df2346353322ac51ce84ce6d8Issue Tracking, Mailing List, Patch, Vendor Advisory
https://kernel.dance/3e91b0ebd994635df2346353322ac51ce84ce6d8Patch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/01/msg00004.htmlMailing List, Third Party Advisory

Timeline

Published: Sep 6, 2023
Last modified: Jul 30, 2026
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-424415.3Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). Starting in version 0.2.9 and prior to version 0.3.10, l CVE-2023-424425.3JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and CVE-2023-424438.1Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In version 0.3.9 and prior, under certain conditions, th CVE-2023-424447.5phonenumber is a library for parsing, formatting and validating international phone numbers. Prior to versions `0.3.3+8.13.9` and `0.2.5+8.1 CVE-2023-424455.3Gradle is a build tool with a focus on build automation and support for multi-language development. In some cases, when Gradle parses XML fi CVE-2023-424466.5Pow is a authentication and user management solution for Phoenix and Plug-based apps. Starting in version 1.0.14 and prior to version 1.0.34 CVE-2023-424477.5blurhash-rs is a pure Rust implementation of Blurhash, software for encoding images into ASCII strings that can be turned into a gradient of CVE-2023-424488.1Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, the specification states that the contestation period in t CVE-2023-424498.1Hydra is the two-layer scalability solution for Cardano. Prior to version 0.13.0, it is possible for a malicious head initializer to extract CVE-2023-42454.3The WooCommerce PDF Invoice Builder for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the GetI CVE-2023-424507.5Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 4.2.0-beta1 and prior to version 4.2.0-rc2, CVE-2023-424517.5Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 3.5.14, 4.0.10, 4.1.8, and 4.2.0-rc2, under ce