Design/Logic Flaw

2023-07-2121:15:00

PRIOn knowledge base

www.prio-n.com

linux kernel

netfilter

nf_tables

use-after-free

vulnerability

local privilege escalation

upgrade

commit 4bedf9eee016286c835e3d8fa981ddece5338795

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A use-after-free vulnerability in the Linux kernel’s netfilter: nf_tables component can be exploited to achieve local privilege escalation.

Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.

We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.

CPENameOperatorVersion
debian_linuxeq10.0
debian_linuxeq11.0
linux_kernelge5.16
linux_kernellt6.1.36
linux_kernelge6.2
linux_kernellt6.3.10
linux_kernelge5.9
linux_kernellt5.10.188
linux_kernelge5.11
linux_kernellt5.15.119

Name	Operator	Version
debian_linux	eq	10.0
debian_linux	eq	11.0
linux_kernel	ge	5.16
linux_kernel	lt	6.1.36
linux_kernel	ge	6.2
linux_kernel	lt	6.3.10
linux_kernel	ge	5.9
linux_kernel	lt	5.10.188
linux_kernel	ge	5.11
linux_kernel	lt	5.15.119