CVE-2023-32233
CVE-2023-32233
7.8
HighPublished:
Last updated:
Source:cve@mitre.org
Modified
Weakness (CWE)
CVSS Vector
v3.1- Attack Vector
- Local
- Attack Complexity
- Low
- Privileges Required
- Low
- User Interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Description
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
References
cve@mitre.org
http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.htmlcve@mitre.org
https://bugzilla.redhat.com/show_bug.cgi?id=2196105cve@mitre.org
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edabcve@mitre.org
https://news.ycombinator.com/item?id=35879660cve@mitre.org
https://www.debian.org/security/2023/dsa-5402af854a3a-2127-422b-91ae-364da2661108
http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.htmlaf854a3a-2127-422b-91ae-364da2661108
http://www.openwall.com/lists/oss-security/2023/05/15/5af854a3a-2127-422b-91ae-364da2661108
https://bugzilla.redhat.com/show_bug.cgi?id=2196105af854a3a-2127-422b-91ae-364da2661108
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edabaf854a3a-2127-422b-91ae-364da2661108
https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edabaf854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2023/06/msg00008.htmlaf854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2023/07/msg00030.htmlaf854a3a-2127-422b-91ae-364da2661108
https://news.ycombinator.com/item?id=35879660af854a3a-2127-422b-91ae-364da2661108
https://security.netapp.com/advisory/ntap-20230616-0002/af854a3a-2127-422b-91ae-364da2661108
https://www.debian.org/security/2023/dsa-5402af854a3a-2127-422b-91ae-364da2661108
https://www.openwall.com/lists/oss-security/2023/05/08/4