Findings

CVE-2023-35001

Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace

Published Jul 5, 2023 · updated Oct 15, 2026 · linux linux kernel

Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Jul 5, 2023 · NIST NVD

    Detected

    Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace

  2. Oct 15, 2026 · NIST NVD

    Updated

    Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace

Affected

  • cpe debian/debian linux11.0
  • cpe fedoraproject/fedora37
  • cpe linux/linux kernelversion unspecified
  • cpe netapp/h300sversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2023-35001

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2023-35001

    30-day exploitation probability 1.5%

    first.org
  • NIST NVDVulnerability recordCVE-2023-35001

    Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace

    nvd.nist.gov
  • Packet Storm SecurityCited referencehttp://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com
  • Packet Storm SecurityCited referencehttp://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References