A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · git.kernel.org

Timeline

Detection, updates, and resolution for this record.

1. Sep 27, 2023 · NIST NVD

   Detected

   A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Addition and removal of rules from chain bindings within the same transaction causes leads to use-after-free. We recommend upgrading past commit f15f29fd4779be8a418b66e9d52979bb6d6c2325.

2. Oct 14, 2026 · NIST NVD

   Updated

   A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Addition and removal of rules from chain bindings within the same transaction causes leads to use-after-free. We recommend upgrading past commit f15f29fd4779be8a418b66e9d52979bb6d6c2325.

Affected

• cpe debian/debian linux10.0
• cpe linux/linux kernelversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2023-5197

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2023-5197

  30-day exploitation probability 0.4%

  first.org
• NIST NVDVulnerability recordCVE-2023-5197

  A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Addition and removal of rules from chain bindings within the same transaction causes leads to use-after-free. We recommend upgrading past

  nvd.nist.gov
• Packet Storm SecurityCited referencehttp://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html

  Packet Storm link already published on the finding.

  packetstormsecurity.com

References

• Third Party Advisory · packetstormsecurity.com
• Patch · git.kernel.org
• Patch · kernel.dance
• Mailing List · lists.debian.org