7.8
CVSSv3

CVE-2023-32233

Published: 08/05/2023 Updated: 28/09/2023
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 0

Vulnerability Summary

In the Linux kernel up to and including 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel

redhat enterprise linux 7.0

redhat enterprise linux 8.0

redhat enterprise linux 9.0

netapp hci baseboard management controller h300s

netapp hci baseboard management controller h500s

netapp hci baseboard management controller h700s

netapp hci baseboard management controller h410s

netapp hci baseboard management controller h410c

Vendor Advisories

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2023-0386 It was discovered that under certain conditions the overlayfs filesystem implementation did not properly handle copy up operations A local user permitted to mount overlay mount ...
In the Linux kernel through 631, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory Unprivileged local users can obtain root privileges This occurs because anonymous sets are mishandled (CVE-2023-32233) ...
Description<!---->A use-after-free flaw was found in the Netfilter nf_tables (net/netfilter/nf_tables_apic) in the Linux kernel This flaw allows unprivileged local users to execute arbitrary kernel code, possibly leading to an information leak issueA use-after-free flaw was found in the Netfilter nf_tables (net/netfilter/nf_tables_apic) in the ...
Synopsis Important: kpatch-patch security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kpatch-patch is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as ...
Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 81 Update Services for SAP SolutionsRed Hat Produ ...
Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 90 Extended Update SupportRed Hat Product Securit ...
Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this upd ...
Synopsis Important: kpatch-patch security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kpatch-patch is now available for Red Hat Enterprise Linux 81 Update Services for SAP SolutionsRed Hat Produ ...
Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this update as ...
Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this upd ...
Synopsis Important: OpenShift Virtualization 4133 Images security and bug fix update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Virtualization release 4133 is now available with updates to packages and images that fix several bugs and add enhancementsRed Hat Product Security has rated this update as having a secur ...
Synopsis Important: kernel security update Type / Sévérité Security Advisory: Important Analyse des correctifs dans Red Hat Insights Identifiez et remédiez aux systèmes concernés par cette alerte Voir les systèmes concernés Sujet An update for kernel is now available for Red Hat Enterprise Linux 77 Advanced Update Support ...
Synopsis Important: kpatch-patch security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kpatch-patch is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this update as ...
Synopsis Important: kpatch-patch security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kpatch-patch is now available for Red Hat Enterprise Linux 86 Extended Update SupportRed Hat Product Securit ...
Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 86 Extended Update SupportRed Hat Product Securit ...
Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 82 Telecommunications Update ServiceRed Hat ...
Synopsis Important: kpatch-patch security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kpatch-patch-4_18_0-193_100_1, kpatch-patch-4_18_0-193_105_1, kpatch-patch-4_18_0-193_95_1, and kpatch-patch-4 ...
Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 82 Advanced Update Support, Red Hat Enterprise Lin ...
Synopsis Important: kpatch-patch security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kpatch-patch is now available for Red Hat Enterprise Linux 90 Extended Update SupportRed Hat Product Securit ...
Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 74 Advanced Update SupportRed Hat Product Security has rated ...
Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 76 Advanced Update SupportRed Hat Product Security has rated ...
Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as ...
概要 Important: kernel-rt security and bug fix update タイプ/重大度 Security Advisory: Important Red Hat Insights パッチ分析 このアドバイザリーの影響を受けるシステムを特定し、修正します。 影響を受けるシステムの表示 トピック An update for kernel-rt is now available for Red ...
Synopsis Important: OpenShift Container Platform 41145 bug fix and security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Container Platform release 41145 is now available with updates to packages and images that fix several bugs and add enhancementsThis release includes a security update for Red Hat OpenShift ...
LTS-108 is being updated in the LTS channel to&nbsp;10805359235&nbsp;(Platform Version:&nbsp;15183980) for most ChromeOS devices Want to know more about Long Term Support? Click&nbsp;hereThis update contains multiple Security fixes, including:1450481&nbsp;High&nbsp;&nbsp;CVE-2023-3079&nbsp;Type Confusion in V81440695&nbsp;High&nbsp;CVE-2023- ...
A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctlc in the Linux Kernel Device Mapper-Multipathing sub-component (CVE-2023-2269) In the Linux kernel through 631, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to ...
In the Linux kernel through 631, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory Unprivileged local users can obtain root privileges This occurs because anonymous sets are mishandled (CVE-2023-32233) ...
A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctlc in the Linux Kernel Device Mapper-Multipathing sub-component (CVE-2023-2269) In the Linux kernel through 631, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to ...
In the Linux kernel through 631, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory Unprivileged local users can obtain root privileges This occurs because anonymous sets are mishandled (CVE-2023-32233) ...
A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4filec in the Linux kernel This flaw allows an attacker to conduct a remote denial of service (CVE-2022-4379) In the Linux kernel through 631, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write opera ...
In the Linux kernel through 631, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory Unprivileged local users can obtain root privileges This occurs because anonymous sets are mishandled (CVE-2023-32233) ...
In the Linux kernel through 631, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory Unprivileged local users can obtain root privileges This occurs because anonymous sets are mishandled (CVE-2023-32233) ...
In the Linux kernel through 631, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory Unprivileged local users can obtain root privileges This occurs because anonymous sets are mishandled (CVE-2023-32233) ...
A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4filec in the Linux kernel This flaw allows an attacker to conduct a remote denial of service (CVE-2022-4379) In the Linux kernel through 631, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write opera ...
A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4filec in the Linux kernel This flaw allows an attacker to conduct a remote denial of service (CVE-2022-4379) In the Linux kernel through 631, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write opera ...

Github Repositories

tools It is a reference to POC-CVE-2023-32233 , i was seeing that is was made for ubuntu 23 I was modifing the source and test it in a centos 8 Stuff to do or need it : sudo yum install libmnl-devel libnftnl-devel -y sudo yum install epel-release -y sudo yum groupinstall "Development Tools" -y sudo update -y gcc -Wall -o exploit exploitc -lmnl -lnftnl -lpthread /e

CVE Tools CVE Tools Purpose ITS CVE - 2023 - 32233 Detection Script The CVE CVE-ID Description References Assigning CNA Date Record Created Phase (Legacy) detect-sprysh Created By: Version: Purpose These are a collection of scripts that I wrote to help the Linux Admin team with certain CVEs ITS CVE - 2023 - 32233 Detection Script This script will detect the affl

CVE-2023-32233 5x内核适配 现有EXP githubcom/Liuk3r/CVE-2023-32233/tree/main githubcom/google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-32233_mitigation 原因 由于低版本(&lt;516)内核中缺少了补丁,导致无法使用nft_quota结构体的consumed字段来写读写内存地址,考虑使用rop的方法进行提权