Lucene search

K
nvd[email protected]NVD:CVE-2023-5972
HistoryNov 23, 2023 - 6:15 p.m.

CVE-2023-5972

2023-11-2318:15:07
CWE-476
web.nvd.nist.gov
1
cve-2023-5972
linux kernel
privilege escalation
local user
system crash
netfilter

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system.

Affected configurations

NVD
Node
linuxlinux_kernelRange6.2.16.5.10
OR
linuxlinux_kernelMatch6.2rc1
OR
linuxlinux_kernelMatch6.2rc2
OR
linuxlinux_kernelMatch6.2rc3
OR
linuxlinux_kernelMatch6.2rc4
OR
linuxlinux_kernelMatch6.2rc5
OR
linuxlinux_kernelMatch6.2rc6
OR
linuxlinux_kernelMatch6.2rc7
OR
linuxlinux_kernelMatch6.2rc8
OR
linuxlinux_kernelMatch6.2.0rc1
OR
linuxlinux_kernelMatch6.2.0rc2
OR
linuxlinux_kernelMatch6.2.0rc3
OR
linuxlinux_kernelMatch6.2.0rc4
OR
linuxlinux_kernelMatch6.2.0rc5
OR
linuxlinux_kernelMatch6.2.0rc6
OR
linuxlinux_kernelMatch6.6rc1
OR
linuxlinux_kernelMatch6.6rc2
OR
linuxlinux_kernelMatch6.6rc3
OR
linuxlinux_kernelMatch6.6rc4
OR
linuxlinux_kernelMatch6.6rc5
OR
linuxlinux_kernelMatch6.6rc6
Node
fedoraprojectfedoraMatch39

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%