The vulnerability of the nf_tables_commit() function in the kernel’s net/netfilter/nf_tables_api.c file in the Linux operating system allows a attacker to compromise data confidentiality, integrity, and accessibility, or to enhance their privileges within the system and execute arbitrary code.

🗓️ 17 May 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 11 Views

nf_tables_commit flaw in the Linux kernel due to improper list deletion enables data breach, privilege escalation, and code execution.

Reporter	Title	Published	Views	Family All 489
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux kernel, libssh, and Java can affect IBM Spectrum Protect Plus	22 Aug 202314:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps	26 Mar 202503:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management	28 Jul 202315:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	17 Oct 202400:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture includes components with multiple known vulnerabilities	15 Apr 202502:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities. [CVE-2022-42889, CVE-2023-35001, CVE-2023-32233]	19 Dec 202317:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Linux Kernel vulnerabilities may affect IBM Elastic Storage System	4 Dec 202310:25	–	ibm
GithubExploit	Exploit for Use After Free in Linux Linux_Kernel	4 Feb 202402:24	–	githubexploit
GithubExploit	Exploit for Use After Free in Linux Linux_Kernel	16 May 202303:06	–	githubexploit
GithubExploit	Exploit for Use After Free in Linux Linux_Kernel	1 Apr 202401:20	–	githubexploit

Vulners

Node

red_hat red_hat_enterprise_linuxMatch7

OR

red_hat red_hat_enterprise_linuxMatch8

OR

red_hat red_hat_enterprise_linuxMatch9

Source	Link
openwall	www.openwall.com/lists/oss-security/2023/05/08/4
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
git	www.git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/
github	www.github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab
access	www.access.redhat.com/security/cve/CVE-2023-32233
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-32233
kernel	www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.315
kernel	www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.283
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.243
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.180

19 Aug 2025 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 26.8

CVSS 37.8

EPSS0.12966

nf_tables_commit linux kernel improper list deletion data breach privilege escalation arbitrary code execution