In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. Th…

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2023-32233 · Microsoft / collected KEV context

cve-program · CVE-2023-32233

• https://www.openwall.com/lists/oss-security/2023/05/08/4
• https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab
• https://news.ycombinator.com/item?id=35879660
• https://bugzilla.redhat.com/show_bug.cgi?id=2196105
• https://www.debian.org/security/2023/dsa-5402
• http://www.openwall.com/lists/oss-security/2023/05/15/5
• https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html
• https://security.netapp.com/advisory/ntap-20230616-0002/
• http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html
• https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html

No related operational record is retained in the current change model.