CVE-2023-5197
MEDIUM
MEDIUM
Priority: 0.02
BB Relevance:
38/100
Published: 2023-09-27
Modified: 2026-11-02
First seen: 2026-11-02
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
Low
I:
Low
A:
High
Description
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Addition and removal of rules from chain bindings within the same transaction causes leads to use-after-free. We recommend upgrading past commit f15f29fd4779be8a418b66e9d52979bb6d6c2325.
Weakness Classification (1)
Affected Software (3)
| Vendor | Product | Version |
|---|---|---|
| Linux | Kernel | 5.9 < 6.6 |
| debian | debian_linux | 10.0 |
| linux | linux_kernel | 5.9.0 – 5.10.198 |
References & Advisories (5)
patch