--- id: CVE-2023-32233 title: >- In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory summary: >- In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges.… severity: high cvss: 7.8 cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H' cwe: - CWE-416 vendor: netapp product: hci_baseboard_management_controller affected: - 'linux_kernel >= 3.13, < 4.14.315' - 'linux_kernel >= 4.15, < 4.19.283' - 'linux_kernel >= 4.20, < 5.4.243' - 'linux_kernel >= 5.5, < 5.10.180' - 'linux_kernel >= 5.11, < 5.15.111' - 'linux_kernel >= 5.16, < 6.1.28' - 'linux_kernel >= 6.2, < 6.2.15' - 'linux_kernel >= 6.3, < 6.3.2' - enterprise_linux = 7.0 - enterprise_linux = 8.0 - enterprise_linux = 9.0 - hci_baseboard_management_controller = h300s - hci_baseboard_management_controller = h410c - hci_baseboard_management_controller = h410s - hci_baseboard_management_controller = h500s - hci_baseboard_management_controller = h700s patched: - linux_kernel 6.3.2 published: '2023-05-08' updated: '2026-10-15' sourceUpdated: '2026-10-15T00:16:31.683' source: NVD sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-32233' references: - url: >- http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html label: cve@mitre.org - url: 'http://www.openwall.com/lists/oss-security/2023/05/15/5' label: cve@mitre.org - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2196105' label: cve@mitre.org - url: >- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab label: cve@mitre.org - url: >- https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab label: cve@mitre.org - url: 'https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html' label: cve@mitre.org - url: 'https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html' label: cve@mitre.org - url: 'https://news.ycombinator.com/item?id=35879660' label: cve@mitre.org - url: 'https://security.netapp.com/advisory/ntap-20230616-0002/' label: cve@mitre.org - url: 'https://www.debian.org/security/2023/dsa-5402' label: cve@mitre.org - url: 'https://www.openwall.com/lists/oss-security/2023/05/08/4' label: cve@mitre.org - url: >- http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://www.openwall.com/lists/oss-security/2023/05/15/5' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2196105' label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://news.ycombinator.com/item?id=35879660' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://security.netapp.com/advisory/ntap-20230616-0002/' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://www.debian.org/security/2023/dsa-5402' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://www.openwall.com/lists/oss-security/2023/05/08/4' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://cert-portal.siemens.com/productcert/html/ssa-794697.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e - url: 'https://cert-portal.siemens.com/productcert/html/ssa-806742.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e tags: - nvd - exploit-available - cve.org epss: 0.12966 epssPercentile: 0.96271 exploits: github: 8 githubRepos: - 'https://github.com/PIDAN-HEIDASHUAI/CVE-2023-32233' - 'https://github.com/Liuk3r/CVE-2023-32233' - 'https://github.com/oferchen/POC-CVE-2023-32233' checkedAt: '2026-10-15T01:08:37.767Z' exploitAvailable: true ingestedAt: '2026-10-15T01:08:04.201Z' ssvc: exploitation: none automatable: 'no' technicalImpact: total timestamp: '2025-04-23T13:28:27.494776Z' --- ## Overview In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled. ## Affected - `linux_kernel >= 3.13, < 4.14.315` - `linux_kernel >= 4.15, < 4.19.283` - `linux_kernel >= 4.20, < 5.4.243` - `linux_kernel >= 5.5, < 5.10.180` - `linux_kernel >= 5.11, < 5.15.111` - `linux_kernel >= 5.16, < 6.1.28` - `linux_kernel >= 6.2, < 6.2.15` - `linux_kernel >= 6.3, < 6.3.2` - `enterprise_linux = 7.0` - `enterprise_linux = 8.0` - `enterprise_linux = 9.0` - `hci_baseboard_management_controller = h300s` - `hci_baseboard_management_controller = h410c` - `hci_baseboard_management_controller = h410s` - `hci_baseboard_management_controller = h500s` - `hci_baseboard_management_controller = h700s` ## Remediation Upgrade past the affected range: - `linux_kernel 6.3.2`