CVE-2023-6817

HIGH

Use-after-free in Linux kernel's netfilter: nf_tables component

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-6817 has a selected CVSS score of 7.8 (high).

Description

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-after-free. We recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a.

Description source: CVE List

Affected products and versions

5
ProductSourceVersion range

Kernel

Browse Linux / Kernel

Default status: unaffected

CVE List5.6 to < 6.7affected

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP

Browse Siemens / SIMATIC S7-1500 CPU 1518-4 PN/DP MFP

Default status: unknown

CVE ListV3.1.0 to < V3.1.5affected

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP

Browse Siemens / SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP

Default status: unknown

CVE ListV3.1.0 to < V3.1.5affected

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

Browse Siemens / SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

Default status: unknown

CVE ListBefore *affected

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

Browse Siemens / SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

Default status: unknown

CVE ListV3.1.0 to < V3.1.5affected

References

9