Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2023-42753

Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: poc
  • Automatable: no
  • Technical impact: total

Summary

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: poc · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • kernel-rt

    Version range not reported

  • kernel

    Version range not reported

  • kpatch-patch

    Version range not reported

  • kernel

    Version range not reported

  • kernel-rt

    Version range not reported

  • kpatch-patch

    Version range not reported

  • kernel

    Version range not reported

  • kernel

    Version range not reported

  • kernel-rt

    Version range not reported

  • kernel

    Version range not reported

  • kpatch-patch

    Version range not reported

  • kernel

    Version range not reported

  • kernel

    Version range not reported

  • kernel-rt

    Version range not reported

  • kernel

    Version range not reported

  • kernel

    Version range not reported

  • kpatch-patch

    Version range not reported

  • kpatch-patch

    Version range not reported

  • kernel

    Version range not reported

  • kernel

    Version range not reported

  • kpatch-patch

    Version range not reported

  • kernel

    Version range not reported

  • kpatch-patch

    Version range not reported

  • kernel

    Version range not reported

  • kernel-rt

    Version range not reported

  • kpatch-patch

    Version range not reported

  • kernel

    Version range not reported

  • kernel-rt

    Version range not reported

  • kpatch-patch

    Version range not reported

  • kernel

    Version range not reported

  • kernel

    Version range not reported

  • kernel-rt

    Version range not reported

References 25

access.redhat.com