CVE-2023-32233

moderate-risk
Published 2023-05-08

In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.

Do I need to act?

-
0.68% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.8/10 High
LOCAL / LOW complexity

Affected Products (9)

Affected Vendors

Redhat Linux Netapp

References (22)

Patch http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LS...
Mailing List http://www.openwall.com/lists/oss-security/2023/05/15/5
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=2196105
Mailing List https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592...
Patch https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57eda...
Third Party Advisory https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html
Mailing List https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html
Issue Tracking https://news.ycombinator.com/item?id=35879660
Mailing List https://security.netapp.com/advisory/ntap-20230616-0002/
Mailing List https://www.debian.org/security/2023/dsa-5402
Mailing List https://www.openwall.com/lists/oss-security/2023/05/08/4
Patch http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LS...
Mailing List http://www.openwall.com/lists/oss-security/2023/05/15/5
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=2196105
Mailing List https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592...
Patch https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57eda...
Third Party Advisory https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html
Mailing List https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html
Issue Tracking https://news.ycombinator.com/item?id=35879660
Mailing List https://security.netapp.com/advisory/ntap-20230616-0002/
and 2 more references
41
/ 100
moderate-risk
Severity 24/34 · High
Exploitability 2/34 · Minimal
Exposure 15/34 · Moderate