PT-2023-5515
CVE-2023-5197
·
Published
2023-09-08
·
Updated
2026-10-14
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free vulnerability in the Linux kernel's netfilter: nf tables component can be exploited to achieve local privilege escalation. The issue arises from the addition and removal of rules from chain bindings within the same transaction, leading to use-after-free.
Recommendations
Upgrade past commit f15f29fd4779be8a418b66e9d52979bb6d6c2325 to resolve the issue. As a temporary workaround, consider restricting access to the netfilter: nf tables component to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾