CVE-2023-35001

HIGH 7.8EPSS 1.5%

Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace

CVSS v3.1: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.51% chance of exploitation in the next 30 days, 73th percentile
Published: 2023-07-05
Updated: 2025-02-13

Proof-of-concept exploits (4)

mrbrelax/Exploit_CVE-2023-350010★ · 2024-01-18
syedhafiz1234/nftables-oob-read-write-exploit-CVE-2023-35001-7★ · 2023-09-04
synacktiv/CVE-2023-35001169★ · 2023-11-12
ChristopherPatrickKuntz/bifrost-infrastructure-disclosure

References

Related