Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-32233

In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.

Published

2023-05-08T20:15:20.267

Last Modified

2025-05-05T16:15:39.637

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses

Type: Primary
CWE-416
Type: Secondary
CWE-416

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	linux	linux_kernel	< 4.14.315	Yes
Operating System	linux	linux_kernel	< 4.19.283	Yes
Operating System	linux	linux_kernel	< 5.4.243	Yes
Operating System	linux	linux_kernel	< 5.10.180	Yes
Operating System	linux	linux_kernel	< 5.15.111	Yes
Operating System	linux	linux_kernel	< 6.1.28	Yes
Operating System	linux	linux_kernel	< 6.2.15	Yes
Operating System	linux	linux_kernel	< 6.3.2	Yes
Operating System	redhat	enterprise_linux	7.0	Yes
Operating System	redhat	enterprise_linux	8.0	Yes
Operating System	redhat	enterprise_linux	9.0	Yes
Application	netapp	hci_baseboard_management_controller	h300s	Yes
Application	netapp	hci_baseboard_management_controller	h410c	Yes
Application	netapp	hci_baseboard_management_controller	h410s	Yes
Application	netapp	hci_baseboard_management_controller	h500s	Yes
Application	netapp	hci_baseboard_management_controller	h700s	Yes

References

http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html Patch, Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2023/05/15/5 Mailing List, Third Party Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=2196105 Issue Tracking, Mitigation, Third Party Advisory ([email protected])
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab Mailing List, Patch ([email protected])
https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab Patch ([email protected])
https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html Third Party Advisory ([email protected])
https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing List, Third Party Advisory ([email protected])
https://news.ycombinator.com/item?id=35879660 Issue Tracking ([email protected])
https://security.netapp.com/advisory/ntap-20230616-0002/ Mailing List, Third Party Advisory ([email protected])
https://www.debian.org/security/2023/dsa-5402 Mailing List, Third Party Advisory ([email protected])
https://www.openwall.com/lists/oss-security/2023/05/08/4 Mailing List, Patch, Third Party Advisory ([email protected])
http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/05/15/5 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=2196105 Issue Tracking, Mitigation, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://news.ycombinator.com/item?id=35879660 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20230616-0002/ Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.debian.org/security/2023/dsa-5402 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.openwall.com/lists/oss-security/2023/05/08/4 Mailing List, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)