Bug 2241143 (CVE-2023-5197) - CVE-2023-5197 kernel: netfilter: nf_tables: use-after-free due to addition and removal of rules from chain bindings within the same transaction
Summary: CVE-2023-5197 kernel: netfilter: nf_tables: use-after-free due to addition an...
Keywords:
Status: NEW
Alias: CVE-2023-5197
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: 2241147
TreeView+ depends on / blocked
 
Reported: 2023-09-28 08:57 UTC by TEJ RATHI
Modified: 2024-10-12 08:27 UTC (History)
39 users (show)

Fixed In Version: Kernel 6.6-rc3
Doc Type: If docs needed, set a value
Doc Text:
A use-after-free vulnerability was found in net/netfilter/nf_tables_api.c in the netfilter component in the Linux Kernel. This flaw can be exploited to achieve local privilege escalation. Adding and removing rules from chain bindings within the same transaction leads to a use-after-free issue.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description TEJ RATHI 2023-09-28 08:57:00 UTC 
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Addition and removal of rules from chain bindings within the same transaction causes leads to use-after-free.

We recommend upgrading past commit f15f29fd4779be8a418b66e9d52979bb6d6c2325.

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f15f29fd4779be8a418b66e9d52979bb6d6c2325
https://kernel.dance/f15f29fd4779be8a418b66e9d52979bb6d6c2325
Note You need to log in before you can comment on or make changes to this bug.