CVE-2023-35001

An out-of-bounds (OOB) memory access flaw was found in the Netfilter module in the Linux kernel’s nft_byteorder_eval in net/netfilter/nft_byteorder.c. A bound check failure allows a local attacker with CAP_NET_ADMIN access to cause a local privilege escalation issue due to incorrect data alignment.

Mitigation

To mitigate this issue, it is possible to prevent the affected code from being loaded by blacklisting the kernel netfilter module.

For instructions relating to how to blacklist a kernel module refer to: <https://access.redhat.com/solutions/41278&gt;