ZeroDay Findings
Sign inSign up

Findings

CVE-2023-3773

A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem).

Published Jul 25, 2023 · updated Oct 14, 2026 · Red Hat Red Hat Enterprise Linux 9

A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, leading to potential leakage of sensitive heap data to userspace.

Timeline

Detection, updates, and resolution for this record.

  1. Jul 25, 2023 · NIST NVD

    Detected

    A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, leading to potential leakage of sensitive heap data to userspace.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, leading to potential leakage of sensitive heap data to userspace.

Affected

  • cpe debian/debian linux10.0
  • cpe debian/debian linux12.0
  • cpe fedoraproject/fedoraversion unspecified
  • cpe linux/linux kernelversion unspecified
  • cpe redhat/enterprise linux8.0
  • cpe redhat/enterprise linux9.0
  • vendor Red Hat Red Hat Enterprise Linux 6version unspecified
  • vendor Red Hat Red Hat Enterprise Linux 7version unspecified
  • vendor Red Hat Red Hat Enterprise Linux 8version unspecified
  • vendor Red Hat Red Hat Enterprise Linux 9version unspecified

Sources

  • CIRCL Vulnerability LookupCVE-2023-3773

    A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, leading to potential lea

    vulnerability.circl.lu
  • CVE.orgCVE-2023-3773

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2023-3773

    30-day exploitation probability 0.3%

    first.org
  • NIST NVDCVE-2023-3773

    A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, leading to potential lea

    nvd.nist.gov

References