Back
CVE-2023-32233
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform…
High7.8EPSS 13.4%
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 13.4% · top 3.5% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Weakness
Affected products
n/a
- affected n/a
References (13)
- https://www.openwall.com/lists/oss-security/2023/05/08/4 (opens in a new tab)x_transferred
- https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab (opens in a new tab)x_transferred
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab (opens in a new tab)x_transferred
- https://news.ycombinator.com/item?id=35879660 (opens in a new tab)x_transferred
- https://bugzilla.redhat.com/show_bug.cgi?id=2196105 (opens in a new tab)x_transferred
- DSA-5402 (opens in a new tab)vendor-advisoryx_transferred
- [oss-security] 20230515 Re: [CVE-2023-32233] Linux kernel use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary reads and writes in kernel memory (opens in a new tab)mailing-listx_transferred
- [debian-lts-announce] 20230605 [SECURITY] [DLA 3446-1] linux-5.10 security update (opens in a new tab)mailing-listx_transferred
- https://security.netapp.com/advisory/ntap-20230616-0002/ (opens in a new tab)x_transferred
- http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html (opens in a new tab)x_transferred
- [debian-lts-announce] 20230727 [SECURITY] [DLA 3508-1] linux security update (opens in a new tab)mailing-listx_transferred
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html (opens in a new tab)
- https://cert-portal.siemens.com/productcert/html/ssa-806742.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-32233)Record last updated .