PT-2023-5515
CVE-2023-5197
·
Publicado
2023-09-08
·
Atualizado
2026-10-14
Descrição por
CVSS 3.1
7.8
AltaMétricasAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free vulnerability in the Linux kernel's netfilter: nf tables component can be exploited to achieve local privilege escalation. The issue arises from the addition and removal of rules from chain bindings within the same transaction, leading to use-after-free.
Recommendations
Upgrade past commit f15f29fd4779be8a418b66e9d52979bb6d6c2325 to resolve the issue. As a temporary workaround, consider restricting access to the netfilter: nf tables component to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾