CVE-2023-4015
Use-after-free in Linux kernel's netfilter: nf_tables component
HIGH 7.8EPSS 0.3%
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nft_immediate_deactivate() can lead unbinding the chain and objects be deactivated but later used. We recommend upgrading past commit 0a771f7b266b02d262900c75f1e175c7fe76fec2.
- Affected
- Linux · Kernel
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 0.29% chance of exploitation in the next 30 days, 20th percentile
- Published
- 2023-09-06
- Updated
- 2026-10-14
Exploit collections (3)
- linux/kernelctf/CVE-2023-4015_cosgoogle/security-research
- linux/kernelctf/CVE-2023-4015_ltsgoogle/security-research
- linux/kernelctf/CVE-2023-4015_lts_2google/security-research
Security advisories
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0a771f7b266…
- https://kernel.dance/0a771f7b266b02d262900c75f1e175c7fe76fec2
- https://www.debian.org/security/2023/dsa-5492