imPC@ndo IT

Tracker / CVE-2023-31248

CVE-2023-31248

High 7.8

Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace

Affected products and versions

canonical ubuntu_linux
debian debian_linux
fedoraproject fedora
linux linux_kernel · 5.11 → 5.15.121
linux linux_kernel · 5.16 → 6.1.39
linux linux_kernel · 5.9 → 5.10.188
linux linux_kernel · 6.2 → 6.4.4

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References