PT-2023-3482 · Linux+10 · Linux Kernel+10
Pablo Neira Ayuso
·
Published
2023-06-08
·
Updated
2024-07-04
·
CVE-2023-3390
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf tables api.c. Mishandled error handling with
NFT MSG NEWRULE makes it possible to use a dangling pointer in the same transaction, causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue. The vulnerability was exploited in real-world incidents, including the Google kernelCTF instances, where researchers managed to exploit all instances with the same bug.Recommendations
To resolve the issue, upgrade past commit 1240eb93f0616b21c675416516ff3d74798fdc97. As a temporary workaround, consider disabling the vulnerable
NFT MSG NEWRULE parameter in the netfilter subsystem until a patch is available. Restrict access to the vulnerable nf tables api.c module to minimize the risk of exploitation. Avoid using the NFT MSG NEWRULE parameter in the affected API endpoint until the issue is resolved.Exploit
Fix
DoS
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu