CVE-2023-4015

2023-08-0300:00:00

ubuntu.com

linux kernel

netfilter

nf_tables

use-after-free

vulnerability

local privilege escalation

upgrading

commit 0a771f7b266b02d262900c75f1e175c7fe76fec2

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

A use-after-free vulnerability in the Linux kernel’s netfilter: nf_tables
component can be exploited to achieve local privilege escalation. On an
error when building a nftables rule, deactivating immediate expressions in
nft_immediate_deactivate() can lead unbinding the chain and objects be
deactivated but later used. We recommend upgrading past commit
0a771f7b266b02d262900c75f1e175c7fe76fec2.

Notes

Author	Note
	Priority reason: By using unprivileged user namespaces, this can be exploited to achieve local privilege escalation.
rodrigo-zaiden	Google kCTF submission

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlinux< 5.15.0-82.91UNKNOWN
ubuntu23.04noarchlinux< 6.2.0-31.31UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1043.48UNKNOWN
ubuntu23.04noarchlinux-aws< 6.2.0-1010.10UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1043.48~20.04.1UNKNOWN
ubuntu22.04noarchlinux-aws-6.2< 6.2.0-1010.10~22.04.1UNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1045.52UNKNOWN
ubuntu23.04noarchlinux-azure< 6.2.0-1010.10UNKNOWN
ubuntu20.04noarchlinux-azure-5.15< 5.15.0-1045.52~20.04.1UNKNOWN
ubuntu22.04noarchlinux-azure-fde< 5.15.0-1045.52.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	22.04	noarch	linux	< 5.15.0-82.91	UNKNOWN
ubuntu	23.04	noarch	linux	< 6.2.0-31.31	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1043.48	UNKNOWN
ubuntu	23.04	noarch	linux-aws	< 6.2.0-1010.10	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1043.48~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-aws-6.2	< 6.2.0-1010.10~22.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< 5.15.0-1045.52	UNKNOWN
ubuntu	23.04	noarch	linux-azure	< 6.2.0-1010.10	UNKNOWN
ubuntu	20.04	noarch	linux-azure-5.15	< 5.15.0-1045.52~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure-fde	< 5.15.0-1045.52.1	UNKNOWN