ZeroDay Findings
Sign inSign up

Findings

CVE-2023-4004

A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END.

Published Jul 31, 2023 · updated Oct 14, 2026 · Red Hat Red Hat Enterprise Linux 8

A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.

Timeline

Detection, updates, and resolution for this record.

  1. Jul 31, 2023 · NIST NVD

    Detected

    A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.

Affected

  • cpe debian/debian linux10.0
  • cpe fedoraproject/fedora38
  • cpe linux/linux kernelversion unspecified
  • cpe netapp/h300sversion unspecified
  • cpe redhat/enterprise linux8.0
  • cpe redhat/enterprise linux9.0
  • vendor Red Hat Red Hat Enterprise Linux 8version unspecified
  • vendor Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Supportversion unspecified
  • vendor Red Hat Red Hat Enterprise Linux 8.2 Telecommunications Update Serviceversion unspecified
  • vendor Red Hat Red Hat Enterprise Linux 8.2 Update Services for SAP Solutionsversion unspecified

Sources

  • CIRCL Vulnerability LookupCVE-2023-4004

    A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the syste

    vulnerability.circl.lu
  • CVE.orgCVE-2023-4004

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2023-4004

    30-day exploitation probability 0.9%

    first.org
  • NIST NVDCVE-2023-4004

    A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the syste

    nvd.nist.gov

References