CVE-2023-35001
moderate-risk
Published 2023-07-05
Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
Do I need to act?
-
0.21% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.8/10
High
LOCAL
/ LOW complexity
Affected Products (9)
Affected Vendors
References (22)
Third Party Advisory
http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LS...
Third Party Advisory
http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LS...
Third Party Advisory
https://security.netapp.com/advisory/ntap-20230824-0007/
Third Party Advisory
https://www.debian.org/security/2023/dsa-5453
Third Party Advisory
http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LS...
Third Party Advisory
http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LS...
Third Party Advisory
https://security.netapp.com/advisory/ntap-20230824-0007/
and 2 more references
40
/ 100
moderate-risk
Severity
24/34 · High
Exploitability
1/34 · Minimal
Exposure
15/34 · Moderate