CVE-2023-3777

2023-08-0300:00:00

ubuntu.com

linux kernel

nf_tables component

local privilege escalation

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

A use-after-free vulnerability in the Linux kernel’s netfilter: nf_tables
component can be exploited to achieve local privilege escalation. When
nf_tables_delrule() is flushing table rules, it is not checked whether the
chain is bound and the chain’s owner rule can also release the objects in
certain circumstances. We recommend upgrading past commit
6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8.

Notes

Author	Note
	Priority reason: By using unprivileged user namespaces, this can be exploited to achieve local privilege escalation.
rodrigo-zaiden	Google kCTF submission

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlinux< 5.15.0-82.91UNKNOWN
ubuntu23.04noarchlinux< 6.2.0-31.31UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1043.48UNKNOWN
ubuntu23.04noarchlinux-aws< 6.2.0-1010.10UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1043.48~20.04.1UNKNOWN
ubuntu22.04noarchlinux-aws-6.2< 6.2.0-1010.10~22.04.1UNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1045.52UNKNOWN
ubuntu23.04noarchlinux-azure< 6.2.0-1010.10UNKNOWN
ubuntu20.04noarchlinux-azure-5.15< 5.15.0-1045.52~20.04.1UNKNOWN
ubuntu22.04noarchlinux-azure-fde< 5.15.0-1045.52.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	22.04	noarch	linux	< 5.15.0-82.91	UNKNOWN
ubuntu	23.04	noarch	linux	< 6.2.0-31.31	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1043.48	UNKNOWN
ubuntu	23.04	noarch	linux-aws	< 6.2.0-1010.10	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1043.48~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-aws-6.2	< 6.2.0-1010.10~22.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< 5.15.0-1045.52	UNKNOWN
ubuntu	23.04	noarch	linux-azure	< 6.2.0-1010.10	UNKNOWN
ubuntu	20.04	noarch	linux-azure-5.15	< 5.15.0-1045.52~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure-fde	< 5.15.0-1045.52.1	UNKNOWN