PT-2023-3676 · Linux+9 · Linux Kernel+9
Publicado
2023-06-20
·
Atualizado
2024-09-27
·
CVE-2023-3610
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to the commit 4bedf9eee016286c835e3d8fa981ddece5338795
Description
A use-after-free vulnerability in the Linux kernel's netfilter: nf tables component can be exploited to achieve local privilege escalation. The flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT MSG NEWRULE. The vulnerability requires CAP NET ADMIN to be triggered.
Recommendations
Upgrade past commit 4bedf9eee016286c835e3d8fa981ddece5338795 to resolve the issue. As a temporary workaround, consider restricting access to the netfilter: nf tables component to minimize the risk of exploitation.
Correção
LPE
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu