Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-31248HistoryJul 05, 2023 - 7:15 p.m.
CVE-2023-31248
2023-07-0519:15:09
Debian Security Bug Tracker
security-tracker.debian.org
15
linux kernel
nftables
use-after-free
local privilege escalation
vulnerability
nft_chain_lookup_byid()
cap_net_admin
user namespace
network namespace
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
15.9%
Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; nft_chain_lookup_byid() failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | linux | < 6.1.38-1 | linux_6.1.38-1_all.deb |
| Debian | 11 | all | linux | < 5.10.179-2 | linux_5.10.179-2_all.deb |
| Debian | 999 | all | linux | < 6.4.4-1 | linux_6.4.4-1_all.deb |
| Debian | 13 | all | linux | < 6.4.4-1 | linux_6.4.4-1_all.deb |
Related
prion
prion
Privilege escalation
2023-07-05 19:15:00
cvelist
cvelist
zdi
zdi
ubuntucve
ubuntucve
CVE-2023-31248
2023-07-05 00:00:00
redhatcve
redhatcve
CVE-2023-31248
2023-07-10 18:17:47
cve
cve
CVE-2023-31248
2023-07-05 19:15:09
nvd
nvd
CVE-2023-31248
2023-07-05 19:15:09
fedora
fedora
[SECURITY] Fedora 37 Update: kernel-headers-6.4.4-100.fc37
2023-07-23 01:25:12
[SECURITY] Fedora 38 Update: kernel-headers-6.4.4-200.fc38
2023-07-23 01:30:41
[SECURITY] Fedora 37 Update: kernel-6.4.4-100.fc37
2023-07-23 01:25:12
nessus
nessus
Fedora 37 : kernel / kernel-headers / kernel-tools (2023-3661f028b8)
2023-07-23 00:00:00
Fedora 38 : kernel / kernel-headers / kernel-tools (2023-e4e985b5dd)
2023-07-23 00:00:00
Debian DSA-5453-1 : linux - security update
2023-07-17 00:00:00
openvas
openvas
Fedora: Security Advisory for kernel-headers (FEDORA-2023-3661f028b8)
2023-07-26 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2023-3661f028b8)
2023-07-26 00:00:00
Fedora: Security Advisory for kernel-headers (FEDORA-2023-e4e985b5dd)
2023-07-26 00:00:00
mageia
mageia
Updated kernel-linus packages fix security vulnerabilities
2023-07-27 01:07:49
Updated kernel packages fix security vulnerabilities
2023-07-19 22:53:31
osv
osv
linux - security update
2023-07-16 00:00:00
linux-5.10 - security update
2023-07-31 00:00:00
linux-oem-5.17 vulnerabilities
2023-07-25 21:49:46
debian
debian
[SECURITY] [DSA 5453-1] linux security update
2023-07-16 21:39:59
[SECURITY] [DLA 3512-1] linux-5.10 security update
2023-08-02 15:00:39
redhat
redhat
(RHSA-2023:5575) Important: kpatch-patch security update
2023-10-10 10:06:23
(RHSA-2023:5093) Important: kpatch-patch security update
2023-09-12 07:46:19
(RHSA-2023:5603) Important: kernel-rt security and bug fix update
2023-10-10 14:20:32
ubuntu
ubuntu
Kernel Live Patch Security Notice
2023-07-25 00:00:00
Linux kernel (Intel IoTG) vulnerabilities
2023-07-26 00:00:00
Linux kernel vulnerabilities
2023-07-25 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2241
2023-10-10 09:26:01
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2023-09-15 00:00:00
rocky
rocky
kernel-rt security and bug fix update
2023-09-19 12:09:59
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2023-09-12 00:00:00
Important: kernel-rt security and bug fix update
2023-09-12 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0457
2023-08-25 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0059
2023-07-28 00:00:00
ibm
ibm
redos
redos
ROS-20230904-01
2023-09-04 00:00:00
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2023-11-21 21:37:49
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
15.9%
Related for DEBIANCVE:CVE-2023-31248