ZeroDay Findings
Sign inSign up

Findings

CVE-2023-39193

A flaw was found in the Netfilter subsystem in the Linux kernel.

Published Oct 9, 2023 · updated Oct 15, 2026 · linux linux kernel

A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 9, 2023 · NIST NVD

    Detected

    A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.

  2. Oct 15, 2026 · NIST NVD

    Updated

    A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.

Affected

  • cpe fedoraproject/fedora38
  • cpe linux/linux kernelversion unspecified
  • cpe redhat/enterprise linux8.0
  • cpe redhat/enterprise linux9.0

Sources

  • CVE.orgVulnerability recordCVE-2023-39193

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2023-39193

    30-day exploitation probability 0.4%

    first.org
  • NIST NVDVulnerability recordCVE-2023-39193

    A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.

    nvd.nist.gov

References