CVE-2023-5972: Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c
A null pointer dereference flaw was found in the nftinner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system.
Other sources
Two similar flaws in the Linux Kernel found. From v6.2-rc1 to v6.6-rc6two null pointer dereference vulnerabilities in nftables could happen. The first vulnerability is in nftinnerinit() in nftinner.c. The NFTAINNERNUM netlink attribute is accessed At (0) without checking its presence before, so it may be NULL。 The second vulnerability is in nftexprinnerparse(), which is quite similar to the first one. The NFTAEXPRNAME netlink attribute is not checked before accessing it.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2023-5972.
What is the severity of CVE-2023-5972?
The severity of CVE-2023-5972 is high.
How does CVE-2023-5972 affect the system?
CVE-2023-5972 can allow a local user to crash the system or escalate their privileges.
What software is affected by CVE-2023-5972?
The Linux kernel versions 6.2.1 to 6.5.10, 6.2-rc1 to 6.2-rc8, 6.2.0-rc1 to 6.2.0-rc6, and 6.6-rc1 to 6.6-rc6 are affected by CVE-2023-5972.
How can the CVE-2023-5972 vulnerability be fixed?
Apply the latest patches and updates provided by the Linux kernel maintainers.