Vulnerability · Published Sep 25, 2023 · Assigned by redhat

CVE-2023-42753Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

High 7.0

In plain English

A high-severity out-of-bounds write in Red Hat Enterprise Linux 6 from Red Hat. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.0High

Exploit odds (30 days)0.5%top 56.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
AlmaLinux:8	bpftool	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-abi-stablelists	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-core	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-cross-headers	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-debug	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-debug-core	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-debug-devel	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-debug-modules	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-debug-modules-extra	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-devel	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-doc	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-modules	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-modules-extra	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-tools	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-tools-libs	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-tools-libs-devel	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-zfcpdump	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-zfcpdump-core	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-zfcpdump-devel	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-zfcpdump-modules	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	kernel-zfcpdump-modules-extra	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	perf	4.18.0-513.11.1.el8_9	ALSA-2024:0113
AlmaLinux:8	python3-perf	4.18.0-513.11.1.el8_9	ALSA-2024:0113
Debian:12	linux	6.1.55-1	DEBIAN-CVE-2023-42753
Debian:13	linux	6.5.3-1	DEBIAN-CVE-2023-42753
Debian:14	linux	6.5.3-1	DEBIAN-CVE-2023-42753
Rocky Linux:8	kernel-rt	0:4.18.0-513.11.1.rt7.313.el8_9	RLSA-2024:0134
Ubuntu:22.04:LTS	linux	5.15.0-87.97	USN-6446-1
Ubuntu:22.04:LTS	linux	5.15.0-87.97	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-allwinner-5.19	no fix listed	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-aws	5.15.0-1048.53	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-aws	5.15.0-1048.53	USN-6446-1
Ubuntu:22.04:LTS	linux-aws-5.19	no fix listed	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-aws-6.2	6.2.0-1014.14~22.04.1	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-aws-6.2	6.2.0-1014.14~22.04.1	USN-6444-1
Ubuntu:22.04:LTS	linux-azure	5.15.0-1050.57	USN-6446-1
Ubuntu:22.04:LTS	linux-azure	5.15.0-1050.57	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-azure-5.19	no fix listed	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-azure-6.2	6.2.0-1015.15~22.04.1	USN-6444-1
Ubuntu:22.04:LTS	linux-azure-6.2	6.2.0-1015.15~22.04.1	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-azure-fde	5.15.0-1050.57.1	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-azure-fde	5.15.0-1050.57.1	USN-6446-1
Ubuntu:22.04:LTS	linux-azure-fde-5.19	no fix listed	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-azure-fde-6.2	6.2.0-1015.15~22.04.1.1	USN-6444-1
Ubuntu:22.04:LTS	linux-azure-fde-6.2	6.2.0-1015.15~22.04.1.1	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-gcp	5.15.0-1045.53	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-gcp	5.15.0-1045.53	USN-6446-1
Ubuntu:22.04:LTS	linux-gcp-5.19	no fix listed	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-gcp-6.2	6.2.0-1017.19~22.04.1	USN-6444-1
Ubuntu:22.04:LTS	linux-gcp-6.2	6.2.0-1017.19~22.04.1	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-gke	5.15.0-1045.50	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-gke	5.15.0-1045.50	USN-6446-1
Ubuntu:22.04:LTS	linux-gkeop	5.15.0-1031.37	USN-6446-1
Ubuntu:22.04:LTS	linux-gkeop	5.15.0-1031.37	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-hwe-5.19	no fix listed	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-hwe-6.2	6.2.0-35.35~22.04.1	USN-6444-1
Ubuntu:22.04:LTS	linux-hwe-6.2	6.2.0-35.35~22.04.1	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-ibm	5.15.0-1041.44	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-ibm	5.15.0-1041.44	USN-6446-1
Ubuntu:22.04:LTS	linux-intel-iotg	5.15.0-1043.49	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-intel-iotg	5.15.0-1043.49	USN-6445-1
Ubuntu:22.04:LTS	linux-kvm	5.15.0-1045.50	USN-6446-1
Ubuntu:22.04:LTS	linux-kvm	5.15.0-1045.50	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-lowlatency	5.15.0-87.96	USN-6446-1
Ubuntu:22.04:LTS	linux-lowlatency	5.15.0-87.96	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-lowlatency-hwe-5.19	no fix listed	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-lowlatency-hwe-6.2	6.2.0-1015.15~22.04.1	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-lowlatency-hwe-6.2	6.2.0-1015.15~22.04.1	USN-6444-1
Ubuntu:22.04:LTS	linux-nvidia	5.15.0-1039.39	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-nvidia	5.15.0-1039.39	USN-6446-1
Ubuntu:22.04:LTS	linux-nvidia-6.2	6.2.0-1011.11	USN-6466-1
Ubuntu:22.04:LTS	linux-nvidia-6.2	6.2.0-1011.11	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-nvidia-tegra	5.15.0-1019.19	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-nvidia-tegra-igx	5.15.0-1006.6	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-oem-5.17	no fix listed	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-oem-6.0	no fix listed	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-oem-6.1	6.1.0-1023.23	USN-6415-1
Ubuntu:22.04:LTS	linux-oem-6.1	6.1.0-1023.23	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-oem-6.5	no fix listed	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-oracle	5.15.0-1046.52	USN-6446-1
Ubuntu:22.04:LTS	linux-oracle	5.15.0-1046.52	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-raspi	5.15.0-1041.44	USN-6446-1
Ubuntu:22.04:LTS	linux-raspi	5.15.0-1041.44	UBUNTU-CVE-2023-42753
Ubuntu:24.04:LTS	linux-raspi-realtime	no fix listed	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-realtime	no fix listed	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-riscv	no fix listed	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-riscv-5.19	no fix listed	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-starfive-5.19	no fix listed	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-starfive-6.2	6.2.0-1007.8~22.04.1	UBUNTU-CVE-2023-42753
Ubuntu:22.04:LTS	linux-starfive-6.2	6.2.0-1007.8~22.04.1	USN-6444-2
Ubuntu:22.04:LTS	linux-xilinx-zynqmp	5.15.0-1025.29	UBUNTU-CVE-2023-42753

Affected products (as reported)

Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux 7	see references
Red Hat	Red Hat Enterprise Linux 7	see references
Red Hat	Red Hat Enterprise Linux 7	see references
Red Hat	Red Hat Enterprise Linux 7.7 Advanced Update Support	see references
Red Hat	Red Hat Enterprise Linux 8	see references
Red Hat	Red Hat Enterprise Linux 8	see references
Red Hat	Red Hat Enterprise Linux 8	see references
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	see references
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	see references
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	see references
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	see references
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	see references
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	see references
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	see references
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 9	see references
Red Hat	Red Hat Enterprise Linux 9	see references
Red Hat	Red Hat Enterprise Linux 9	see references
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	see references
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	see references

Weakness: CWE-787 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References

RHSA-2023:7370 vendor-advisory, x_refsource_REDHAT
RHSA-2023:7379 vendor-advisory, x_refsource_REDHAT
RHSA-2023:7382 vendor-advisory, x_refsource_REDHAT
RHSA-2023:7389 vendor-advisory, x_refsource_REDHAT
RHSA-2023:7411 vendor-advisory, x_refsource_REDHAT
RHSA-2023:7418 vendor-advisory, x_refsource_REDHAT
RHSA-2023:7539 vendor-advisory, x_refsource_REDHAT
RHSA-2023:7558 vendor-advisory, x_refsource_REDHAT
RHSA-2024:0089 vendor-advisory, x_refsource_REDHAT
RHSA-2024:0113 vendor-advisory, x_refsource_REDHAT
RHSA-2024:0134 vendor-advisory, x_refsource_REDHAT
RHSA-2024:0340 vendor-advisory, x_refsource_REDHAT
RHSA-2024:0346 vendor-advisory, x_refsource_REDHAT
RHSA-2024:0347 vendor-advisory, x_refsource_REDHAT
RHSA-2024:0371 vendor-advisory, x_refsource_REDHAT
RHSA-2024:0376 vendor-advisory, x_refsource_REDHAT
RHSA-2024:0378 vendor-advisory, x_refsource_REDHAT
RHSA-2024:0402 vendor-advisory, x_refsource_REDHAT
RHSA-2024:0403 vendor-advisory, x_refsource_REDHAT
RHSA-2024:0412 vendor-advisory, x_refsource_REDHAT
RHSA-2024:0461 vendor-advisory, x_refsource_REDHAT
RHSA-2024:0562 vendor-advisory, x_refsource_REDHAT
RHSA-2024:0563 vendor-advisory, x_refsource_REDHAT
RHSA-2024:0593 vendor-advisory, x_refsource_REDHAT
RHSA-2024:0999 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-42753 vdb-entry, x_refsource_REDHAT
RHBZ#2239843 issue-tracking, x_refsource_REDHAT
https://seclists.org/oss-sec/2023/q3/216
http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html x_transferred
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html x_transferred
https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html x_transferred
https://www.openwall.com/lists/oss-security/2023/09/22/10 x_transferred
https://cert-portal.siemens.com/productcert/html/ssa-794697.html