Use After Free in Linux Kernel
CVE-2023-3777
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. When nf_tables_delrule() is flushing table rules, it is not checked whether the chain is bound and the chain's owner rule can also release the objects in certain circumstances. We recommend upgrading past commit 6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8.
Vulnerability class: Use-After-Free
EPSS: 0.004 (33.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux Kernel — versions 5.9
- Linux Linux_kernel
- Canonical Ubuntu_linux — versions 14.04, 16.04, 18.04
- Debian Debian_linux — versions 12.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve-coordination@google.com (Patch, Mailing List, patch, Issue Tracking, Vendor Advisory)
- cve-coordination@google.com (Patch, Vendor Advisory)
- cve-coordination@google.com (Third Party Advisory)
- cve-coordination@google.com (VDB Entry, Third Party Advisory)
- cve-coordination@google.com (VDB Entry, Third Party Advisory)
Frequently asked questions
- What is CVE-2023-3777?
- CVE-2023-3777 is a high-severity vulnerability in Linux Kernel, classified under Use After Free. CVSS score: 7.8/10. Published 2023-09-06.
- How severe is CVE-2023-3777?
- High severity. CVSS v3 base score is 7.8 out of 10.
- Is CVE-2023-3777 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.