Lucene search

K
zdiBien Pham (@bienpnn)ZDI-23-1834
HistoryDec 20, 2023 - 12:00 a.m.

Linux Kernel nf_tables_expr_destroy Use-After-Free Privilege Escalation Vulnerability

2023-12-2000:00:00
Bien Pham (@bienpnn)
www.zerodayinitiative.com
13
linux kernel
nf_tables_expr_destroy
use-after-free
privilege escalation
vulnerability
local attackers
arbitrary code
root

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.9%

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the nf_tables_expr_destroy method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root.