CVE-2023-4015

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free vulnerability in the Linux kernel's netfilter: nf tables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nft immediate deactivate() can lead to unbinding the chain and objects being deactivated but later used.

Recommendations Upgrade past commit 0a771f7b266b02d262900c75f1e175c7fe76fec2 to resolve the issue. As a temporary workaround, consider restricting the use of the nft immediate deactivate() function until a patch is available.