Lucene search

K
cvelistGoogleCVELIST:CVE-2023-3390
HistoryJun 28, 2023 - 8:02 p.m.

CVE-2023-3390 Use-after-free in Linux kernel's netfilter subsystem

2023-06-2820:02:07
CWE-416
Google
raw.githubusercontent.com
1
linux
netfilter
use-after-free
vulnerability
privilege escalation

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%

A use-after-free vulnerability was found in the Linux kernel’s netfilter subsystem in net/netfilter/nf_tables_api.c.

Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue.

We recommend upgrading past commitΒ 1240eb93f0616b21c675416516ff3d74798fdc97.