Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Patryk Sondej

#32595of 53,635
7.8Total CVSS
Vulnerabilities · 1
PT-2023-2761
7.8
2023-05-02
Linux · Linux Kernel · CVE-2023-32233
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions through 6.3.1 **Description** A use-after-free vulnerability in the Linux kernel's Netfilter nf tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges due to the mishandling of anonymous sets. This vulnerability may allow an attacker to impact the confidentiality, integrity, and availability of data or elevate their privileges in the system and execute arbitrary code. **Recommendations** Linux kernel versions through 6.3.1: As a temporary workaround, consider disabling the `nf tables commit()` function until a patch is available. Restrict access to the Netfilter nf tables module to minimize the risk of exploitation. Avoid using the `nf tables` API until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.