Findings

CVE-2023-42753

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel.

Published Sep 25, 2023 · updated Oct 15, 2026 · linux linux kernel

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 25, 2023 · NIST NVD

    Detected

    An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

  2. Oct 15, 2026 · NIST NVD

    Updated

    An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

Affected

  • cpe debian/debian linux10.0
  • cpe linux/linux kernelversion unspecified
  • cpe redhat/enterprise linux7.0

Sources

  • CVE.orgCVE-2023-42753

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2023-42753

    30-day exploitation probability 0.5%

    first.org
  • NIST NVDCVE-2023-42753

    An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This iss

    nvd.nist.gov

References

CVE-2023-42753 · ZeroDay Findings