CVE-2023-31248

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The issue is related to a use-after-free vulnerability in the nft chain lookup byid() function, which failed to check whether a chain was active and if CAP NET ADMIN is in any user or network namespace. This vulnerability can be exploited to escalate privileges, potentially impacting the confidentiality, integrity, and availability of protected information. The vulnerability is associated with a race condition due to concurrent access to a resource.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.