medium
5.5
CWE
401
EPSS
0.042%
Advisory Published
CVE Published
CVE Published
Updated

CVE-2023-7192: Kernel: refcount leak in ctnetlink_create_conntrack()

First published: Sat Dec 30 2023(Updated: )

A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacker with CAP_NET_ADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow.

Credit: secalert@redhat.com secalert@redhat.com

Affected SoftwareAffected VersionHow to fix
ubuntu/linux<4.15.0-222.233
4.15.0-222.233
ubuntu/linux<5.4.0-152.169
5.4.0-152.169
ubuntu/linux<5.15.0-79.86
5.15.0-79.86
ubuntu/linux<3.13.0-196.247
3.13.0-196.247
ubuntu/linux<6.3~
6.3~
ubuntu/linux<4.4.0-251.285
4.4.0-251.285
ubuntu/linux-aws<4.15.0-1165.178
4.15.0-1165.178
ubuntu/linux-aws<5.4.0-1104.112
5.4.0-1104.112
ubuntu/linux-aws<5.15.0-1042.47
5.15.0-1042.47
ubuntu/linux-aws<4.4.0-1128.134
4.4.0-1128.134
ubuntu/linux-aws<6.3~
6.3~
ubuntu/linux-aws<4.4.0-1166.181
4.4.0-1166.181
ubuntu/linux-aws-5.15<5.15.0-1041.46~20.04.1
5.15.0-1041.46~20.04.1
ubuntu/linux-aws-5.15<6.3~
6.3~
ubuntu/linux-aws-5.4<6.3~
6.3~
ubuntu/linux-aws-6.2<6.3~
6.3~
ubuntu/linux-aws-hwe<6.3~
6.3~
ubuntu/linux-aws-hwe<4.15.0-1165.178~16.04.1
4.15.0-1165.178~16.04.1
ubuntu/linux-azure<5.4.0-1110.116
5.4.0-1110.116
ubuntu/linux-azure<5.15.0-1044.51
5.15.0-1044.51
ubuntu/linux-azure<4.15.0-1174.189~14.04.1
4.15.0-1174.189~14.04.1
ubuntu/linux-azure<6.3~
6.3~
ubuntu/linux-azure<4.15.0-1174.189~16.04.1
4.15.0-1174.189~16.04.1
ubuntu/linux-azure-4.15<4.15.0-1174.189
4.15.0-1174.189
ubuntu/linux-azure-4.15<6.3~
6.3~
ubuntu/linux-azure-5.15<5.15.0-1043.50~20.04.1
5.15.0-1043.50~20.04.1
ubuntu/linux-azure-5.15<6.3~
6.3~
ubuntu/linux-azure-5.4<6.3~
6.3~
ubuntu/linux-azure-6.2<6.3~
6.3~
ubuntu/linux-azure-fde<5.15.0-1044.51
5.15.0-1044.51
ubuntu/linux-azure-fde<6.3~
6.3~
ubuntu/linux-azure-fde-5.15<5.15.0-1043.50~20.04.1
5.15.0-1043.50~20.04.1
ubuntu/linux-azure-fde-5.15<6.3~
6.3~
ubuntu/linux-azure-fde-6.2<6.3~
6.3~
ubuntu/linux-bluefield<5.4.0-1065.71
5.4.0-1065.71
ubuntu/linux-bluefield<6.3~
6.3~
ubuntu/linux-fips<6.3~
6.3~
ubuntu/linux-gcp<5.4.0-1107.116
5.4.0-1107.116
ubuntu/linux-gcp<5.15.0-1039.47
5.15.0-1039.47
ubuntu/linux-gcp<6.3~
6.3~
ubuntu/linux-gcp<4.15.0-1159.176~16.04.1
4.15.0-1159.176~16.04.1
ubuntu/linux-gcp-4.15<4.15.0-1159.176
4.15.0-1159.176
ubuntu/linux-gcp-4.15<6.3~
6.3~
ubuntu/linux-gcp-5.15<5.15.0-1039.47~20.04.1
5.15.0-1039.47~20.04.1
ubuntu/linux-gcp-5.15<6.3~
6.3~
ubuntu/linux-gcp-5.19<6.3~
6.3~
ubuntu/linux-gcp-5.4<6.3~
6.3~
ubuntu/linux-gke<5.15.0-1039.44
5.15.0-1039.44
ubuntu/linux-gke<6.3~
6.3~
ubuntu/linux-gkeop<5.4.0-1071.75
5.4.0-1071.75
ubuntu/linux-gkeop<5.15.0-1025.30
5.15.0-1025.30
ubuntu/linux-gkeop<6.3~
6.3~
ubuntu/linux-gkeop-5.15<5.15.0-1025.30~20.04.1
5.15.0-1025.30~20.04.1
ubuntu/linux-gkeop-5.15<6.3~
6.3~
ubuntu/linux-hwe<6.3~
6.3~
ubuntu/linux-hwe<4.15.0-222.233~16.04.1
4.15.0-222.233~16.04.1
ubuntu/linux-hwe-5.15<5.15.0-79.86~20.04.2
5.15.0-79.86~20.04.2
ubuntu/linux-hwe-5.15<6.3~
6.3~
ubuntu/linux-hwe-5.4<6.3~
6.3~
ubuntu/linux-hwe-6.2<6.3~
6.3~
ubuntu/linux-ibm<5.4.0-1051.56
5.4.0-1051.56
ubuntu/linux-ibm<5.15.0-1035.38
5.15.0-1035.38
ubuntu/linux-ibm<6.3~
6.3~
ubuntu/linux-ibm-5.15<5.15.0-1035.38~20.04.1
5.15.0-1035.38~20.04.1
ubuntu/linux-ibm-5.15<6.3~
6.3~
ubuntu/linux-ibm-5.4<6.3~
6.3~
ubuntu/linux-intel-iotg<5.15.0-1037.42
5.15.0-1037.42
ubuntu/linux-intel-iotg<6.3~
6.3~
ubuntu/linux-intel-iotg-5.15<5.15.0-1037.42~20.04.1
5.15.0-1037.42~20.04.1
ubuntu/linux-intel-iotg-5.15<6.3~
6.3~
ubuntu/linux-iot<5.4.0-1017.18
5.4.0-1017.18
ubuntu/linux-iot<6.3~
6.3~
ubuntu/linux-kvm<4.15.0-1149.154
4.15.0-1149.154
ubuntu/linux-kvm<5.4.0-1093.99
5.4.0-1093.99
ubuntu/linux-kvm<5.15.0-1039.44
5.15.0-1039.44
ubuntu/linux-kvm<6.3~
6.3~
ubuntu/linux-kvm<4.4.0-1129.139
4.4.0-1129.139
ubuntu/linux-laptop<6.3~
6.3~
ubuntu/linux-lowlatency<5.15.0-79.88
5.15.0-79.88
ubuntu/linux-lowlatency<6.3~
6.3~
ubuntu/linux-lowlatency-hwe-5.15<5.15.0-79.88~20.04.1
5.15.0-79.88~20.04.1
ubuntu/linux-lowlatency-hwe-5.15<6.3~
6.3~
ubuntu/linux-lowlatency-hwe-6.2<6.3~
6.3~
ubuntu/linux-lts-xenial<4.4.0-251.285~14.04.1
4.4.0-251.285~14.04.1
ubuntu/linux-lts-xenial<6.3~
6.3~
ubuntu/linux-nvidia<5.15.0-1030.30
5.15.0-1030.30
ubuntu/linux-nvidia<6.3~
6.3~
ubuntu/linux-nvidia-6.2<6.3~
6.3~
ubuntu/linux-oem-6.1<6.1.0-1009.9
6.1.0-1009.9
ubuntu/linux-oem-6.1<6.3~
6.3~
ubuntu/linux-oem-6.5<6.3~
6.3~
ubuntu/linux-oracle<4.15.0-1128.139
4.15.0-1128.139
ubuntu/linux-oracle<5.4.0-1103.112
5.4.0-1103.112
ubuntu/linux-oracle<5.15.0-1040.46
5.15.0-1040.46
ubuntu/linux-oracle<6.3~
6.3~
ubuntu/linux-oracle<4.15.0-1128.139~16.04.1
4.15.0-1128.139~16.04.1
ubuntu/linux-oracle-5.15<5.15.0-1040.46~20.04.1
5.15.0-1040.46~20.04.1
ubuntu/linux-oracle-5.15<6.3~
6.3~
ubuntu/linux-oracle-5.4<6.3~
6.3~
ubuntu/linux-raspi<5.4.0-1088.99
5.4.0-1088.99
ubuntu/linux-raspi<5.15.0-1035.38
5.15.0-1035.38
ubuntu/linux-raspi<6.3~
6.3~
ubuntu/linux-raspi-5.4<6.3~
6.3~
ubuntu/linux-riscv<6.3~
6.3~
ubuntu/linux-riscv-5.15<5.15.0-1038.42~20.04.2
5.15.0-1038.42~20.04.2
ubuntu/linux-riscv-5.15<6.3~
6.3~
ubuntu/linux-starfive<6.3~
6.3~
ubuntu/linux-xilinx-zynqmp<5.4.0-1024.28
5.4.0-1024.28
ubuntu/linux-xilinx-zynqmp<6.3~
6.3~
redhat/Kernel<6.3
6.3
Linux Linux kernel<6.3
Redhat Enterprise Linux=8.0
Redhat Enterprise Linux=9.0
debian/linux<=4.19.249-2
4.19.304-1
5.10.209-2
5.10.205-2
6.1.76-1
6.1.85-1
6.6.15-2
6.7.12-1

Remedy

https://bugzilla.redhat.com/show_bug.cgi?id=2256279

Remedy

https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=ac4893980bbe79ce383daf9a0885666a30fe4c83

Remedy

If not needed, disable the ability for unprivileged users to create namespaces. To do this temporarily, do: sudo sysctl -w kernel.unprivileged_userns_clone=0 To disable across reboots, do: echo kernel.unprivileged_userns_clone=0 | \ sudo tee /etc/sysctl.d/99-disable-unpriv-userns.conf

Remedy

https://git.kernel.org/linus/7d367e06688dc7a2cc98c2ace04e1296e1d987e2

Remedy

https://git.kernel.org/linus/ac4893980bbe79ce383daf9a0885666a30fe4c83

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203