CVE-2023-5197High· 7.8▾ TwilightA use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Addition and removal of rules from chain bindings within the same transaction causes leads to us…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
Addition and removal of rules from chain bindings within the same transaction causes leads to use-after-free.
We recommend upgrading past commit f15f29fd4779be8a418b66e9d52979bb6d6c2325.
debian_linux = 10.0linux_kernel >= 5.9.0, < 5.10.198linux_kernel >= 5.11, < 5.15.134linux_kernel >= 5.16, < 6.1.56linux_kernel >= 6.2, < 6.5.6Upgrade past the affected range:
linux_kernel 6.5.6Connected by shared product, vendor, weakness, or advisory.
CVE-2023-6932High· 7.8A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object wh…
CVE-2023-4623High· 7.8A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation. If a class with a link-sharing curve (i.e
CVE-2022-3534Medium· 5.5A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1
CVE-2023-35827High· 7.0An issue was discovered in the Linux kernel through 6.3.8
CVE-2023-5178High· 8.8A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel
CVE-2023-3777High· 7.8A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. When nf_tables_delrule() is flushing table rules, it is not checked whether the chain is bound a…