Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

CVE-2023-42753

Summary

An array indexing vulnerability exists in the netfilter subsystem of the Linux kernel due to a missing macro, which can lead to miscalculation of the h->nets array offset. This flaw enables attackers to exploit memory buffer operations, resulting in potential local system crashes or privilege escalation.

References