CVE-2023-6111: Use-after-free in Linux kernel's netfilter: nf_tables component

Q: What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2023-6111.

Q: What is the title of this vulnerability?

The title of this vulnerability is 'Use-after-free in Linux kernel's netfilter: nf_tables component'.

Q: What is the severity level of this vulnerability?

The severity level of this vulnerability is high (7.8).

Q: How can this vulnerability be exploited?

This vulnerability can be exploited to achieve local privilege escalation.

Q: Is there any fix available for this vulnerability?

Yes, a fix for this vulnerability is available. Please refer to the provided references for more information.

Published Nov 14, 2023

Updated

A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. The function nfttransgccatchall did not remove the catchall set element from the catchalllist when the argument sync is true, making it possible to free a catchall set element many times. We recommend upgrading past commit 93995bf4af2c5a99e2a87f0cd5ce547d31eb7630.

Affected Software

61 affected componentsFixes available

ubuntu/linux-hwe<6.7~

6.7~

ubuntu/linux-hwe-5.4<6.7~

6.7~

ubuntu/linux-hwe-5.15<6.7~

6.7~

ubuntu/linux-hwe-6.2<6.7~

6.7~

ubuntu/linux-lts-xenial<6.7~

6.7~

ubuntu/linux-kvm<6.7~

6.7~

ubuntu/linux-aws-5.4<6.7~

6.7~

ubuntu/linux-aws-5.15<6.7~

6.7~

ubuntu/linux-aws-6.2<6.7~

6.7~

ubuntu/linux-aws-hwe<6.7~

6.7~

ubuntu/linux-azure<6.7~

6.7~

ubuntu/linux-azure-4.15<6.7~

6.7~

ubuntu/linux-azure-5.4<6.7~

6.7~

ubuntu/linux-azure-5.15<6.7~

6.7~

ubuntu/linux-azure-6.2<6.7~

6.7~

ubuntu/linux-azure-fde<6.7~

6.7~

ubuntu/linux-azure-fde-5.15<6.7~

6.7~

ubuntu/linux-azure-fde-6.2<6.7~

6.7~

ubuntu/linux-bluefield<6.7~

6.7~

ubuntu/linux-fips<6.7~

6.7~

ubuntu/linux-gcp<6.7~

6.7~

ubuntu/linux-gcp-4.15<6.7~

6.7~

ubuntu/linux-gcp-5.4<6.7~

6.7~

ubuntu/linux-gcp-5.15<6.7~

6.7~

ubuntu/linux-gcp-5.19<6.7~

6.7~

ubuntu/linux-gke<6.7~

6.7~

ubuntu/linux-gkeop<6.7~

6.7~

ubuntu/linux-gkeop-5.15<6.7~

6.7~

ubuntu/linux-ibm<6.7~

6.7~

ubuntu/linux-ibm-5.4<6.7~

6.7~

ubuntu/linux-ibm-5.15<6.7~

6.7~

ubuntu/linux-intel-iotg<6.7~

6.7~

ubuntu/linux-intel-iotg-5.15<6.7~

6.7~

ubuntu/linux-iot<6.7~

6.7~

ubuntu/linux-laptop<6.7~

6.7~

ubuntu/linux-lowlatency<6.7~

6.7~

ubuntu/linux-lowlatency-hwe-5.15<6.7~

6.7~

ubuntu/linux-lowlatency-hwe-6.2<6.7~

6.7~

ubuntu/linux-nvidia<6.7~

6.7~

ubuntu/linux-nvidia-6.2<6.7~

6.7~

ubuntu/linux-oracle<6.7~

6.7~

ubuntu/linux-oracle-5.4<6.7~

6.7~

ubuntu/linux-oracle-5.15<6.7~

6.7~

ubuntu/linux-oem-6.1<6.7~

6.7~

ubuntu/linux-oem-6.1<6.1.0-1028.28

6.1.0-1028.28

ubuntu/linux-oem-6.5<6.7~

6.7~

ubuntu/linux-raspi<6.7~

6.7~

ubuntu/linux-raspi-5.4<6.7~

6.7~

ubuntu/linux-riscv<6.7~

6.7~

ubuntu/linux-riscv-5.15<6.7~

6.7~

ubuntu/linux-starfive<6.7~

6.7~

ubuntu/linux-starfive-6.2<6.7~

6.7~

ubuntu/linux-xilinx-zynqmp<6.7~

6.7~

ubuntu/linux<6.7~

6.7~

ubuntu/linux-aws<6.7~

6.7~

debian/linux

4.19.249-24.19.304-15.10.197-15.10.205-26.1.66-16.1.69-16.5.13-16.6.9-1

Linux Linux kernel>=6.6<6.7

Linux Linux kernel>=5.15.134<5.15.140

Linux Linux kernel>=6.1.56<6.1.64

Linux Linux kernel>=6.5.6<6.5.13

Linux Linux kernel>=6.6<6.6.3

Remediation

Patch Available

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=93995bf4af2c5a99e2a87f0cd5ce547d31eb7630

Patch Available

https://kernel.dance/93995bf4af2c5a99e2a87f0cd5ce547d31eb7630

Mitigation

If not needed, disable the ability for unprivileged users to create namespaces. To do this temporarily, do: sudo sysctl -w kernel.unprivileged_userns_clone=0 To disable across reboots, do: echo kernel.unprivileged_userns_clone=0 | \ sudo tee /etc/sysctl.d/99-disable-unpriv-userns.conf

Patch Available

https://git.kernel.org/linus/4a9e12ea7e70223555ec010bec9f711089ce96f6

Patch Available

https://git.kernel.org/linus/93995bf4af2c5a99e2a87f0cd5ce547d31eb7630

Event History

Nov 14, 2023

CVE Published

via Ubuntu·12:00 AM

CVE Published

via MITRE·02:05 PM

Data Sourced

via MITRE·02:05 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Jan 12, 2024

Data Sourced

via Launchpad·12:28 AM

Description

Parent advisories

This vulnerability appears in the following advisories.

USN-6576-1

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2023-6111.

What is the title of this vulnerability?

The title of this vulnerability is 'Use-after-free in Linux kernel's netfilter: nf_tables component'.

What is the severity level of this vulnerability?

The severity level of this vulnerability is high (7.8).

How can this vulnerability be exploited?

This vulnerability can be exploited to achieve local privilege escalation.

Is there any fix available for this vulnerability?

Yes, a fix for this vulnerability is available. Please refer to the provided references for more information.

CVE-2023-6111: Use-after-free in Linux kernel's netfilter: nf_tables component

Affected Software

Remediation

Patch Available

Patch Available

Mitigation

Patch Available

Patch Available

Event History

Parent advisories

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

What is the title of this vulnerability?

What is the severity level of this vulnerability?

How can this vulnerability be exploited?

Is there any fix available for this vulnerability?

Company

Resources

Contact