NetSight
IP …
high7.0

CVE-2023-42753

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel.

Impact

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.4.165 before 4.5
from 4.9.141 before 4.10
from 4.14.84 before 4.15
from 4.19.5 before 4.19.295
from 4.20 before 5.4.257
from 5.5 before 5.10.195
RedhatEnterprise Linux
Versions 7.0, 8.0, 9.0
DebianDebian Linux
Version 10.0

Weakness classification

CWE-787

References