CVE-2023-6622

2023-12-0800:00:00

ubuntu.com

null pointer vulnerability

nft_dynset_init

netfilter

linux kernel

local privilege escalation

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON

A null pointer dereference vulnerability was found in nft_dynset_init() in
net/netfilter/nft_dynset.c in nf_tables in the Linux kernel. This issue may
allow a local attacker with CAP_NET_ADMIN user privilege to trigger a
denial of service.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlinux< 5.15.0-94.104UNKNOWN
ubuntu23.10noarchlinux< 6.5.0-17.17UNKNOWN
ubuntu24.04noarchlinux< anyUNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1053.58UNKNOWN
ubuntu23.10noarchlinux-aws< 6.5.0-1013.13UNKNOWN
ubuntu24.04noarchlinux-aws< anyUNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1053.58~20.04.1UNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1056.64UNKNOWN
ubuntu23.10noarchlinux-azure< 6.5.0-1015.15UNKNOWN
ubuntu24.04noarchlinux-azure< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	22.04	noarch	linux	< 5.15.0-94.104	UNKNOWN
ubuntu	23.10	noarch	linux	< 6.5.0-17.17	UNKNOWN
ubuntu	24.04	noarch	linux	< any	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1053.58	UNKNOWN
ubuntu	23.10	noarch	linux-aws	< 6.5.0-1013.13	UNKNOWN
ubuntu	24.04	noarch	linux-aws	< any	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1053.58~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< 5.15.0-1056.64	UNKNOWN
ubuntu	23.10	noarch	linux-azure	< 6.5.0-1015.15	UNKNOWN
ubuntu	24.04	noarch	linux-azure	< any	UNKNOWN