Lucene search

K
redhatcveRedhat.comRH:CVE-2023-3777
HistorySep 06, 2023 - 6:05 p.m.

CVE-2023-3777

2023-09-0618:05:37
redhat.com
access.redhat.com
103
linux kernel
nf_tables
use-after-free
local privilege escalation
netfilter
mitigation
blacklist mechanism

0.0004 Low

EPSS

Percentile

5.2%

A use-after-free flaw was found in the Linux kernel’s netfilter: nf_tables component, which can be exploited to achieve local privilege escalation. When nf_tables_delrule() is flushing table rules, it is not checked whether the chain is bound, and the chain’s owner rule can release the objects in certain circumstances.

Mitigation

Mitigation for this issue is to skip loading the affected module "netfilter" onto the system till we have a fix available, this can be done by a blacklist mechanism, this will ensure the driver is not loaded at the boot time.

How do I blacklist a kernel module to prevent it from loading automatically?  
https://access.redhat.com/solutions/41278