CVE-2023-39192
A flaw was found in the Netfilter subsystem in the Linux kernel.
Published Oct 9, 2023 · updated Oct 15, 2026 · linux linux kernel
A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds read by setting the size fields with a value beyond the array boundaries, leading to a crash or information disclosure.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 9, 2023 · NIST NVD
Detected
A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds read by setting the size fields with a value beyond the array boundaries, leading to a crash or information disclosure.
Oct 15, 2026 · NIST NVD
Updated
A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds read by setting the size fields with a value beyond the array boundaries, leading to a crash or information disclosure.
Affected
- cpe fedoraproject/fedora38
- cpe linux/linux kernelversion unspecified
- cpe redhat/enterprise linux8.0
Sources
- CVE.orgVulnerability recordCVE-2023-39192
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2023-39192
30-day exploitation probability 0.4%
first.org - NIST NVDVulnerability recordCVE-2023-39192
A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds read by setting the size fields with a value beyond the array boundarie
nvd.nist.gov