5.5 Medium

CVE-2023-7192 Kernel: refcount leak in ctnetlink_create_conntrack()

Description

A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacker with CAP_NET_ADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow.

CVSS 3.1 detail

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitable with local access to the machine, with an ordinary account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector: Local
Attack complexity: Low
Privileges required: Low
Interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

Affected products and versions

Product	Affected versions	Fixed in
Red Hat Enterprise Linux 8.2 Advanced Update Support	Versions not published
Red Hat Enterprise Linux 8.2 Telecommunications Update Service	Versions not published
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	Versions not published
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Versions not published
Red Hat Enterprise Linux 8.4 Telecommunications Update Service	Versions not published
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	Versions not published
Red Hat Enterprise Linux 8.6 Extended Update Support	Versions not published
Red Hat Enterprise Linux 8.8 Extended Update Support	Versions not published
Red Hat Enterprise Linux 9.0 Extended Update Support	Versions not published

Show the 6 other branches

Product	Affected versions	Fixed in
Red Hat Enterprise Linux 9.2 Extended Update Support	Versions not published
Red Hat Virtualization 4 for Red Hat Enterprise Linux 8	Versions not published
Red Hat Enterprise Linux 6	Versions not published
Red Hat Enterprise Linux 7	Versions not published
Red Hat Enterprise Linux 8	Versions not published
Red Hat Enterprise Linux 9	Versions not published

References

RHSA-2024:0723 access.redhat.com
RHSA-2024:0725 access.redhat.com
RHSA-2024:1188 access.redhat.com
RHSA-2024:1250 access.redhat.com
RHSA-2024:1306 access.redhat.com
RHSA-2024:1367 access.redhat.com
RHSA-2024:1382 access.redhat.com
RHSA-2024:1404 access.redhat.com
RHSA-2024:2006 access.redhat.com
RHSA-2024:2008 access.redhat.com
access.redhat.com access.redhat.com
RHBZ#2256279 bugzilla.redhat.com
git.kernel.org git.kernel.org

Timeline

Published January 2, 2024
Last modified November 5, 2026

The 213 CVEs of Red Hat Enterprise Linux 8.2 Advanced Update Support →

CVE-2026-22016 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE… 7.5 High CVE-2026-5734 Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1 8.1 High CVE-2026-5731 Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and… 9.8 Critical CVE-2026-5201 Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image 7.5 High

Track this CVE