CVE-2023-32233

תיאור (מקור, אנגלית)

In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.

מדדים

CVSS 3.1

7.8 (HIGH) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

13% (אחוזון 100) נכון ל-24/10/2026

CWE

CWE-416

מוצרים מושפעים

linux: linux kernel; redhat: enterprise linux; netapp: hci baseboard management controller

קישורים

• http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-‮… PatchThird Party Advisory
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c15‮… Mailing ListPatch
• https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57e‮… Patch
• https://www.openwall.com/lists/oss-security/2023/05/08/4 Mailing ListPatchThird Party Advisory
• http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-‮… PatchThird Party Advisory
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c15‮… Mailing ListPatch
• https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57e‮… Patch
• https://www.openwall.com/lists/oss-security/2023/05/08/4 Mailing ListPatchThird Party Advisory
• http://www.openwall.com/lists/oss-security/2023/05/15/5 Mailing ListThird Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2196105 Issue TrackingMitigationThird Party Advisory