Findings

CVE-2023-32233

In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations…

Published May 8, 2023 · updated Oct 15, 2026 · linux linux kernel

In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.

Timeline

Detection, updates, and resolution for this record.

  1. May 8, 2023 · NIST NVD

    Detected

    In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.

  2. Oct 15, 2026 · NIST NVD

    Updated

    In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.

Affected

  • cpe linux/linux kernelversion unspecified
  • cpe netapp/hci baseboard management controllerh300s
  • cpe redhat/enterprise linux7.0

Sources

  • CVE.orgCVE-2023-32233

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2023-32233

    30-day exploitation probability 13.0%

    first.org
  • NIST NVDCVE-2023-32233

    In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mis

    nvd.nist.gov
  • Packet Storm Securityhttp://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References