CVE-2023-7192: Kernel: refcount leak in ctnetlink_create_conntrack()
A memory leak problem was found in ctnetlinkcreateconntrack in net/netfilter/nfconntracknetlink.c in the Linux Kernel. In this flaw a local attacker with CAPNETADMIN privilege may cause a denial of service (DoS) attack due to a refcount overflows.
Refer: https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=ac4893980bbe79ce383daf9a0885666a30fe4c83
Other sources
A memory leak problem was found in ctnetlinkcreateconntrack in net/netfilter/nfconntracknetlink.c in the Linux Kernel. This issue may allow a local attacker with CAPNETADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow.
— Launchpad
Kernel: refcount leak in ctnetlinkcreateconntrack()
— Microsoft
Linux Kernel is vulnerable to a denial of service, caused by a use-after-free flaw in the AFPACKET implementation. By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause a denial of service condition.
— IBM
Affected Software
Remediation
Patch Available
Mitigation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-7192?
CVE-2023-7192 is categorized as a high severity vulnerability due to its potential to cause denial of service attacks.
How do I fix CVE-2023-7192?
To address CVE-2023-7192, update your Linux Kernel to version 6.3 or later, or apply the relevant patches provided by your operating system vendor.
Which versions are affected by CVE-2023-7192?
CVE-2023-7192 affects various versions of the Linux Kernel prior to 6.3, as well as specific versions of the Red Hat Enterprise Linux and IBM QRadar SIEM products.
What does CVE-2023-7192 exploit?
CVE-2023-7192 exploits a memory leak in the ctnetlink_create_conntrack function within the Linux Kernel, leading to potential denial of service.
Who can be impacted by CVE-2023-7192?
Local attackers with CAP_NET_ADMIN privileges can exploit CVE-2023-7192 to launch denial of service attacks on the affected systems.