CVE-2023-32233
HIGH EXPLOITEDLinux Kernel 3.13-6.3.1 - Use-After-Free in Netfilter nf_tables via Anonymous Set Mishandling
Title source: llmExploitation Summary
CVE-2023-32233 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 9 public exploits from researchers including Liuk3r, oferchen, PIDAN-HEIDASHUAI.
AI-analyzed exploit summary This is a functional exploit PoC for CVE-2023-32233, targeting a race condition in the Linux kernel's nf_tables module. The exploit leverages a use-after-free vulnerability to achieve local privilege escalation (LPE) by manipulating kernel memory structures.
Description
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
Exploits (9)
This is a functional exploit PoC for CVE-2023-32233, targeting a race condition in the Linux kernel's nf_tables module. The exploit leverages a use-after-free vulnerability to achieve local privilege escalation (LPE) by manipulating kernel memory structures.
This PoC demonstrates a use-after-free vulnerability in the Linux kernel's Netfilter nf_tables component (CVE-2023-32233). The exploit leverages a race condition in batch request processing to achieve arbitrary memory corruption and potential privilege escalation.
This repository contains a proof-of-concept exploit for CVE-2023-32233, targeting a race condition in the Linux kernel's nf_tables module. The exploit requires specific kernel symbols and tuning for different microprocessors to achieve reliable exploitation.
This repository documents a comparative LLM red teaming experiment on CVE-2023-32233, focusing on model behavior and safety alignment rather than providing exploit code or technical details of the vulnerability.
This repository contains a working exploit for CVE-2023-32233, targeting Linux kernel versions <5.16. The exploit leverages a use-after-free (UAF) vulnerability in the nftables subsystem to achieve local privilege escalation (LPE) by spraying `nft_rule` structures and hijacking control flow via ROP.
This repository is a technical case study documenting Google Gemini 2.5 Pro's safety alignment policies and guardrails related to CVE-2023-32233, focusing on the evolution of refusal behavior for legacy Linux kernel vulnerability primitives. It does not contain exploit code but provides a detailed analysis and timeline dataset.
This repository is a technical case study documenting Google Gemini 2.5 Pro's safety alignment policies and guardrails related to CVE-2023-32233, focusing on refusal behavior evolution rather than providing exploit code.
This repository documents a comparative LLM red teaming experiment on CVE-2023-32233 (nf_tables race condition / Use-After-Free), focusing on model behavior and safety alignment rather than providing exploit code.
This repository contains a proof-of-concept exploit for CVE-2023-32233, a use-after-free vulnerability in the Linux kernel's Netfilter nf_tables component. The exploit leverages a race condition to achieve arbitrary memory manipulation, leading to potential privilege escalation or remote code execution.
References (11)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H