Lucene search

[email protected]CVE-2023-5972

HistoryNov 23, 2023 - 6:15 p.m.

CVE-2023-5972

2023-11-2318:15:07

CWE-476

[email protected]

web.nvd.nist.gov

cve-2023-5972

nvd

linux kernel

netfilter

null pointer dereference

local user

privilege escalation

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system.

Affected configurations

NVD

Node

linuxlinux_kernelRange6.2.1–6.5.10

linuxlinux_kernelMatch6.2rc1

linuxlinux_kernelMatch6.2rc2

linuxlinux_kernelMatch6.2rc3

linuxlinux_kernelMatch6.2rc4

linuxlinux_kernelMatch6.2rc5

linuxlinux_kernelMatch6.2rc6

linuxlinux_kernelMatch6.2rc7

linuxlinux_kernelMatch6.2rc8

linuxlinux_kernelMatch6.2.0rc1

linuxlinux_kernelMatch6.2.0rc2

linuxlinux_kernelMatch6.2.0rc3

linuxlinux_kernelMatch6.2.0rc4

linuxlinux_kernelMatch6.2.0rc5

linuxlinux_kernelMatch6.2.0rc6

linuxlinux_kernelMatch6.6rc1

linuxlinux_kernelMatch6.6rc2

linuxlinux_kernelMatch6.6rc3

linuxlinux_kernelMatch6.6rc4

linuxlinux_kernelMatch6.6rc5

linuxlinux_kernelMatch6.6rc6

Node

fedoraprojectfedoraMatch39

CPENameOperatorVersion
linux:linux_kernellinux linux kernelle6.5.10
linux:linux_kernellinux linux kerneleq6.2
linux:linux_kernellinux linux kerneleq6.2.0
linux:linux_kernellinux linux kerneleq6.6

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	le	6.5.10
linux:linux_kernel	linux linux kernel	eq	6.2
linux:linux_kernel	linux linux kernel	eq	6.2.0
linux:linux_kernel	linux linux kernel	eq	6.6

CNA Affected

[
  {
    "product": "kernel",
    "vendor": "n/a",
    "defaultStatus": "affected"
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel-rt",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel-rt",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel-rt",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  },
  {
    "product": "Fedora",
    "vendor": "Fedora",
    "collectionURL": "https://packages.fedoraproject.org/",
    "packageName": "kernel",
    "defaultStatus": "affected"
  }
]