Use-After-Free Vulnerability in Linux Kernel's Netfilter Subsystem

CVE-2023-3390

7.8HIGH

Key Information

Vendor: Linux
Status: Linux Kernel
Vendor: CVE Published:; 28 June 2023

Badges

👾 Exploit Exists🔴 Public PoC

Summary

A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c.

Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue.

We recommend upgrading past commit 1240eb93f0616b21c675416516ff3d74798fdc97.

Affected Version(s)

Linux Kernel < 6.4

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2023-3390_PoC
Created by flygonty