Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2023-6111
HistoryNov 14, 2023 - 12:00 a.m.

CVE-2023-6111

2023-11-1400:00:00
ubuntu.com
ubuntu.com
8
linux
kernel
netfilter
local privilege escalation
vulnerability
upgrade
commit
bugzilla
suse
redhat

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A use-after-free vulnerability in the Linux kernel’s netfilter: nf_tables
component can be exploited to achieve local privilege escalation. The
function nft_trans_gc_catchall did not remove the catchall set element from
the catchall_list when the argument sync is true, making it possible to
free a catchall set element many times. We recommend upgrading past commit
93995bf4af2c5a99e2a87f0cd5ce547d31eb7630.

Bugs

Notes

Author Note
rodrigo-zaiden Google kCTF submission for 5.15 kernels, there was never a release with the commit that introduces the issue. in version 5.15.0-94.104 for the generic kernel, and for the kernels that derivate from that version, both the break and the fix commit were added, but still, there is no vulnerable version released. hence, Ubuntu 5.15 kernels are not-affected.
OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlinux-oem-6.1< 6.1.0-1028.28UNKNOWN

Related

fedora 6
nessus 6
debiancve 1
cbl_mariner 2
openvas 7
nvd 1
prion 1
osv 1
redhatcve 1
ubuntu 1
cvelist 1
cve 1
oraclelinux 1
photon 1
fedora
fedora
[SECURITY] Fedora 38 Update: kernel-headers-6.6.3-100.fc38
2023-12-04 01:51:28
[SECURITY] Fedora 39 Update: kernel-headers-6.6.3-200.fc39
2023-12-04 01:37:59
[SECURITY] Fedora 38 Update: kernel-tools-6.6.3-100.fc38
2023-12-04 01:51:28
nessus
nessus
Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerability (USN-6576-1)
2024-01-10 00:00:00
Fedora 38 : kernel / kernel-headers / kernel-tools (2023-15deb2e32a)
2023-12-03 00:00:00
Fedora 39 : kernel / kernel-headers / kernel-tools (2023-a7b89262c6)
2023-12-03 00:00:00
debiancve
debiancve
CVE-2023-6111
2023-11-14 14:15:29
cbl_mariner
cbl_mariner
CVE-2023-6111 affecting package hyperv-daemons for versions less than 5.15.143.1-1
2024-01-19 03:54:24
CVE-2023-6111 affecting package kernel for versions less than 6.6.29.1-4
2024-06-21 09:32:44
openvas
openvas
Fedora: Security Advisory for kernel-tools (FEDORA-2023-a7b89262c6)
2023-12-05 00:00:00
Fedora: Security Advisory for kernel-tools (FEDORA-2023-15deb2e32a)
2023-12-05 00:00:00
Ubuntu: Security Advisory (USN-6576-1)
2024-01-11 00:00:00
nvd
nvd
CVE-2023-6111
2023-11-14 14:15:29
prion
prion
Design/Logic Flaw
2023-11-14 14:15:00
osv
osv
linux-oem-6.1 vulnerability
2024-01-10 18:19:33
redhatcve
redhatcve
CVE-2023-6111
2023-11-16 16:45:15
ubuntu
ubuntu
Linux kernel (OEM) vulnerability
2024-01-10 00:00:00
cvelist
cvelist
CVE-2023-6111 Use-after-free in Linux kernel's netfilter: nf_tables component
2023-11-14 14:05:35
cve
cve
CVE-2023-6111
2023-11-14 14:15:29
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2024-02-13 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2024-5.0-0187
2024-01-09 00:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for UB:CVE-2023-6111
fedora6nessus6debiancve1cbl_mariner2openvas7nvd1prion1osv1redhatcve1ubuntu1cvelist1cve1oraclelinux1photon1