CVE-2023-6111

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free vulnerability in the Linux kernel's netfilter: nf tables component can be exploited to achieve local privilege escalation. The function nft trans gc catchall did not remove the catchall set element from the catchall list when the argument sync is true, making it possible to free a catchall set element many times.

Recommendations Upgrade past commit 93995bf4af2c5a99e2a87f0cd5ce547d31eb7630 to resolve the issue. As a temporary workaround, consider restricting access to the nft trans gc catchall function until a patch is available.