ZeroDay Findings
Sign inSign up

Findings

CVE-2023-4015

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.

Published Sep 6, 2023 · updated Oct 14, 2026 · Linux Kernel

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nft_immediate_deactivate() can lead unbinding the chain and objects be deactivated but later used. We recommend upgrading past commit 0a771f7b266b02d262900c75f1e175c7fe76fec2.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 6, 2023 · NIST NVD

    Detected

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nft_immediate_deactivate() can lead unbinding the chain and objects be deactivated but later used. We recommend upgrading past commit 0a771f7b266b02d262900c75f1e175c7fe76fec2.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nft_immediate_deactivate() can lead unbinding the chain and objects be deactivated but later used. We recommend upgrading past commit 0a771f7b266b02d262900c75f1e175c7fe76fec2.

Affected

  • cpe debian/debian linux12.0
  • cpe linux/linux kernelversion unspecified
  • vendor Linux Kernelversion unspecified

Sources

  • CIRCL Vulnerability LookupVulnerability recordCVE-2023-4015

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nft_immediate_deactivate() can lead unbinding the chain and

    vulnerability.circl.lu
  • CVE.orgVulnerability recordCVE-2023-4015

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2023-4015

    30-day exploitation probability 0.3%

    first.org
  • NIST NVDVulnerability recordCVE-2023-4015

    A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nft_immediate_deactivate() can lead unbinding the chain an

    nvd.nist.gov

References