Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-39189
HistoryOct 09, 2023 - 6:15 p.m.

Information disclosure

2023-10-0918:15:00
PRIOn knowledge base
www.prio-n.com
8
netfilter subsystem linux kernel flaw local privileged attacker information disclosure

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

16.1%

A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.