Aller au contenu
en Se connecter
7.8 Élevée

CVE-2023-4244 A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local…

Description

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Due to a race condition between nf_tables netlink control plane transaction and nft_set element garbage collection, it is possible to underflow the reference counter causing a use-after-free vulnerability. We recommend upgrading past commit 3e91b0ebd994635df2346353322ac51ce84ce6d8.

Produits et versions touchés

Produit Versions touchées Corrigé en
kernel 6.2 6.2 → < 6.4.11 6.4.11
kernel 5.16 5.16 → < 6.1.56 6.1.56
kernel 5.11 5.11 → < 5.15.134 5.15.134
kernel 5.5 5.5 → < 5.10.198 5.10.198
kernel 4.20 4.20 → < 5.4.262 5.4.262
kernel 0.0 0.0 → < 4.19.316 4.19.316

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de kernel

Les 97 CVE de kernel →
CVE-2021-47482 In the Linux kernel, the following vulnerability has been resolved: net: batman-adv: fix error handling Syzbot… 5.3 Moyenne CVE-2024-25743 In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and… 7.1 Élevée CVE-2021-34981 Linux Kernel Bluetooth CMTP Module Double Free Privilege Escalation Vulnerability 7.5 Élevée CVE-2023-52584 In the Linux kernel, the following vulnerability has been resolved: spmi: mediatek: Fix UAF on device remove The pmif… 3.8 Faible
Suivre cette CVE