Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c

CVE-2023-5972

Summary

A vulnerability exists in the nft_inner.c functionality of the netfilter component of the Linux kernel, where a null pointer dereference could potentially allow a local user to crash the system. This flaw presents a risk of privilege escalation, enabling users to execute unauthorized actions within the system, thereby compromising security and stability. It is crucial for system administrators to apply relevant patches and updates to mitigate this risk.

References