CVE-2023-3610
High
Description
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered. We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux Kernel
PublishedJul 21, 2023
First seenJul 21, 2023
Weakness typeCWE-416Use after free
How to fix
Update
- linux linux_kernel5.10.188, 5.15.119, 6.1.36, 6.3.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 5.9 ≤ v < 5.10.188, 5.11 ≤ v < 5.15.119, 5.16 ≤ v < 6.1.36, 6.2 ≤ v < 6.3.10 | 5.10.188, 5.15.119, 6.1.36, 6.3.10 |
| debian debian_linux | 10.0, 11.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.