PT-2023-3663 · Linux+9 · Linux Kernel+9
Mingi Cho
·
Publicado
2023-07-05
·
Atualizado
2025-11-19
·
CVE-2023-31248
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux Kernel (affected versions not specified)
Description
The issue is related to a use-after-free vulnerability in the
nft chain lookup byid() function, which failed to check whether a chain was active and if CAP NET ADMIN is in any user or network namespace. This vulnerability can be exploited to escalate privileges, potentially impacting the confidentiality, integrity, and availability of protected information. The vulnerability is associated with a race condition due to concurrent access to a resource.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
LPE
Use After Free
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Astra Linux
Linux Kernel
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu