TI-2023-22856 CVE-2023-42753 · GHSA-j66v-q82h-4f8h
Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
Priority HIGH 69
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel.
kpatch-patch security update
Released 2024-01-23 · Red Hat rating Important · View on Red Hat →
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel.
Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.