NetSight
IP …
high7.8

CVE-2023-31248

Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET…

Impact

Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.9 before 5.10.188
from 5.11 before 5.15.121
from 5.16 before 6.1.39
from 6.2 before 6.4.4
FedoraprojectFedora
Versions 37, 38
DebianDebian Linux
Version 11.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 20.04, 22.04

Weakness classification

CWE-416

References