CVE-2023-4147

Published: Aug 7, 2023Modified: Nov 7, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.

Affected (16)

Products: Linux: Linux Kernel · Fedoraproject: Fedora · Redhat: Enterprise Linux, Enterprise Linux Eus, Enterprise Linux For Real Time, Enterprise Linux For Real Time For Nfv, Enterprise Linux Server Aus · +1 more

Show all products

Linux: Linux Kernel · Fedoraproject: Fedora · Redhat: Enterprise Linux, Enterprise Linux Eus, Enterprise Linux For Real Time, Enterprise Linux For Real Time For Nfv, Enterprise Linux Server Aus · Debian: Debian Linux

1 product

1 product

5 products

Enterprise Linux

Enterprise Linux Eus

Enterprise Linux For Real Time

Enterprise Linux For Real Time For Nfv

Enterprise Linux Server Aus

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	5.11 ≤ version < 5.15.124
Linux Linux Kernel	5.16 ≤ version < 6.1.43
Linux Linux Kernel	5.9 ≤ version < 5.10.190
Linux Linux Kernel	6.2 ≤ version < 6.4.8
Linux Linux Kernel	Version 6.5 rc1
Linux Linux Kernel	Version 6.5 rc2
Linux Linux Kernel	Version 6.5 rc3

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 38

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 9.0
Redhat Enterprise Linux Eus	Version 9.2
Redhat Enterprise Linux For Real Time	Version 9.0
Redhat Enterprise Linux For Real Time For Nfv	Version 9.0
Redhat Enterprise Linux Server Aus	Version 9.2

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0
Debian Debian Linux	Version 12.0

Related CWEs

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (24)

https://access.redhat.com/errata/RHSA-2023:5069

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2023:5091

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2023:5093

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2023:7382

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2023:7389

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2023:7411

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/security/cve/CVE-2023-4147

Source: secalert@redhat.com

PatchThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2225239

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0ebc1064e4874d5987722a2ddbc18f94aa53b211

Source: secalert@redhat.com

Mailing ListPatch

https://www.spinics.net/lists/stable/msg671573.html

Source: secalert@redhat.com

Mailing ListPatch

https://access.redhat.com/errata/RHSA-2023:5069

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://access.redhat.com/errata/RHSA-2023:5091

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://access.redhat.com/errata/RHSA-2023:5093

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://access.redhat.com/errata/RHSA-2023:7382

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://access.redhat.com/errata/RHSA-2023:7389

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://access.redhat.com/errata/RHSA-2023:7411

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://access.redhat.com/security/cve/CVE-2023-4147

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2225239

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0ebc1064e4874d5987722a2ddbc18f94aa53b211

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.netapp.com/advisory/ntap-20231020-0006/

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.debian.org/security/2023/dsa-5480

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.debian.org/security/2023/dsa-5492

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.spinics.net/lists/stable/msg671573.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

Timeline

No history available yet.