NetSight
IP …
high7.8

CVE-2023-4004

A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_E…

Impact

A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.6 before 5.10.188
from 5.11 before 5.15.123
from 5.16 before 6.1.42
from 6.2 before 6.4.7
FedoraprojectFedora
Version 38
RedhatEnterprise Linux
Versions 8.0, 9.0
NetappH300s
All versions
NetappH410s
All versions
NetappH500s
All versions
NetappH700s
All versions
DebianDebian Linux
Versions 10.0, 11.0, 12.0

Weakness classification

CWE-416

References