---
id: CVE-2023-4244
title: >-
  A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables
  component can be exploited to achieve local privilege escalation.




  Due to a race condition between nf_tables netlink control plane transaction
  and nft_set elemen…
summary: >-
  A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables
  component can be exploited to achieve local privilege escalation.




  Due to a race condition between nf_tables netlink control plane transaction
  and nft_set elemen…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-416
  - CWE-416
vendor: linux
product: linux_kernel
affected:
  - linux_kernel < 6.5
  - debian_linux = 10.0
patched:
  - linux_kernel 6.5
published: '2023-09-06'
updated: '2026-07-28'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-4244'
references:
  - url: >-
      https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e91b0ebd994635df2346353322ac51ce84ce6d8
    label: cve-coordination@google.com
  - url: 'https://kernel.dance/3e91b0ebd994635df2346353322ac51ce84ce6d8'
    label: cve-coordination@google.com
  - url: 'https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html'
    label: cve-coordination@google.com
  - url: 'https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html'
    label: cve-coordination@google.com
  - url: >-
      https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e91b0ebd994635df2346353322ac51ce84ce6d8
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://kernel.dance/3e91b0ebd994635df2346353322ac51ce84ce6d8'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00241
epssPercentile: 0.15517
ingestedAt: '2026-07-28T16:37:02.911Z'
---

## Overview

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.



Due to a race condition between nf_tables netlink control plane transaction and nft_set element garbage collection, it is possible to underflow the reference counter causing a use-after-free vulnerability.



We recommend upgrading past commit 3e91b0ebd994635df2346353322ac51ce84ce6d8.

## Affected

- `linux_kernel < 6.5`
- `debian_linux = 10.0`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.5`