PT-2023-1168 · Linux+9 · Linux Kernel+9
Davide Ornaghi
·
Publicado
2023-01-13
·
Atualizado
2025-11-11
·
CVE-2023-0179
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 5.5 through 6.2-rc3
Description
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel, specifically in nftables. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution. The vulnerability is related to a stack buffer-overflow in the netfilter subsystem from the softirq context.
Recommendations
For Linux kernel versions 5.5 through 6.2-rc3, consider disabling the nftables subsystem as a temporary workaround until a patch is available. Restrict access to the vulnerable Netfilter subsystem to minimize the risk of exploitation. Avoid using the nftables functionality in the affected Linux kernel versions until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
LPE
Stack Overflow
Out of bounds Read
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu