CVE-2023-31248

A use-after-free flaw was found in the Linux kernel’s Netfilter module in net/netfilter/nf_tables_api.c in nft_chain_lookup_byid. This flaw allows a local attacker to cause a local privilege escalation issue due to a missing cleanup.

Mitigation

To mitigate this issue, it is possible to prevent the affected code from being loaded by blacklisting the kernel netfilter module.

For instructions relating to how to blacklist a kernel module refer to: <https://access.redhat.com/solutions/41278&gt;