Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()
CVE-2023-4004

7.8HIGH

Key Information:

Vendor: Red Hat
Status: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Enterprise Linux 8.2 Telecommunications Update Service; Red Hat Enterprise Linux 8.2 Update Services For SAP Solutions
Vendor: CVE Published:; 31 July 2023

What is CVE-2023-4004?

A use-after-free vulnerability has been identified within the netfilter component of the Linux kernel, specifically in the nft_pipapo_remove function. This flaw occurs when a user attempts to manipulate the function without a properly defined NFT_SET_EXT_KEY_END. Exploitation of this vulnerability could potentially lead to local system crashes or allow an authenticated user to gain elevated privileges, posing a risk to system integrity and security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch