NetSight
IP …
high7.8

CVE-2023-4147

A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID.

Impact

A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.9 before 5.10.190
from 5.11 before 5.15.124
from 5.16 before 6.1.43
from 6.2 before 6.4.8
Version 6.5
FedoraprojectFedora
Version 38
RedhatEnterprise Linux
Version 9.0
RedhatEnterprise Linux Eus
Version 9.2
RedhatEnterprise Linux For Real Time
Version 9.0
RedhatEnterprise Linux For Real Time For Nfv
Version 9.0
RedhatEnterprise Linux Server Aus
Version 9.2
DebianDebian Linux
Versions 10.0, 11.0, 12.0

Weakness classification

CWE-416

References