Log in Start free

Vulnerability · Published Sep 6, 2023 · Assigned by Google

CVE-2023-3777Use-after-free in Linux kernel's netfilter: nf_tables component

High 7.8

In plain English

A high-severity use-after-free in Kernel from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.4%top 64.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. When nf_tables_delrule() is flushing table rules, it is not checked whether the chain is bound and the chain's owner rule can also release the objects in certain circumstances. We recommend upgrading past commit 6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.52-1DSA-5492-1
Debian:12linux6.1.52-1DEBIAN-CVE-2023-3777
Debian:13linux6.4.11-1DEBIAN-CVE-2023-3777
Debian:14linux6.4.11-1DEBIAN-CVE-2023-3777
Ubuntu:22.04:LTSlinux5.15.0-82.91USN-6315-1
Ubuntu:22.04:LTSlinux5.15.0-82.91UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-aws5.15.0-1043.48USN-6315-1
Ubuntu:22.04:LTSlinux-aws5.15.0-1043.48UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-aws-6.26.2.0-1010.10~22.04.1UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-aws-6.26.2.0-1010.10~22.04.1USN-6318-1
Ubuntu:22.04:LTSlinux-azure5.15.0-1045.52UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-azure5.15.0-1045.52USN-6332-1
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1045.52.1USN-6332-1
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1045.52.1UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-gcp5.15.0-1040.48UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-gcp5.15.0-1040.48USN-6315-1
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-gke5.15.0-1040.45USN-6315-1
Ubuntu:22.04:LTSlinux-gke5.15.0-1040.45UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1026.31UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1026.31USN-6315-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-hwe-6.26.2.0-31.31~22.04.1USN-6318-1
Ubuntu:22.04:LTSlinux-hwe-6.26.2.0-31.31~22.04.1UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-ibm5.15.0-1036.39USN-6315-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1036.39UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1038.43USN-6325-1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1038.43UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-kvm5.15.0-1040.45UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-kvm5.15.0-1040.45USN-6315-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-82.91USN-6315-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-82.91UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.26.2.0-1011.11~22.04.1USN-6318-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.26.2.0-1011.11~22.04.1UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1031.31UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1031.31USN-6315-1
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1017.17UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1004.4UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-oem-6.06.0.0-1021.21USN-6385-1
Ubuntu:22.04:LTSlinux-oem-6.06.0.0-1021.21UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-oem-6.16.1.0-1020.20USN-6316-1
Ubuntu:22.04:LTSlinux-oem-6.16.1.0-1020.20UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-oracle5.15.0-1041.47USN-6315-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1041.47UBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-raspi5.15.0-1036.39USN-6348-1
Ubuntu:22.04:LTSlinux-raspi5.15.0-1036.39UBUNTU-CVE-2023-3777
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-3777
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1025.29UBUNTU-CVE-2023-3777

Affected products (as reported)

VendorProductVersions
Linux Kernel 5.9 – before 6.5

Weakness: CWE-416 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References