CVE-2023-3610

HighCVSS 7.8

Published: 21/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Summary

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.

Risk Assessment

Exploitation of this vulnerability by an unauthorized user with the appropriate permissions may lead to privilege escalation in the system.

Recommendation

We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.

Other vulnerabilities in Linux kernel netfilter: nf_tables

CVE-2023-6817High
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.

Original NVD description (English source)

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered. We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS