Use After Free in Linux Kernel
CVE-2023-3777
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. When nf_tables_delrule() is flushing table rules, it is not checked whether the chain is bound and the chain's owner rule can also release the objects in certain circumstances. We recommend upgrading past commit 6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8.
Vulnerability class: Use-After-Free
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.004 (32.2th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 32nd percentile — 32.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000
Affected products
- Linux Kernel — versions 5.9
- Linux Kernel
- Canonical Ubuntu Linux — versions 14.04, 16.04, 18.04
- Debian Linux — versions 12.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/ (Patch, Mailing List, patch, Issue Tracking, Vendor Advisory)
- kernel.dance/6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8 (Patch, Vendor Advisory)
- www.debian.org/security/2023/dsa-5492 (Third Party Advisory)
- packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098… (VDB Entry, Third Party Advisory)
- packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099… (VDB Entry, Third Party Advisory)
Frequently asked questions
- What is CVE-2023-3777?
- CVE-2023-3777 is a high-severity vulnerability in Linux Kernel, classified under Use After Free. CVSS score: 7.8/10. Published 2023-09-06.
- How severe is CVE-2023-3777?
- High severity. CVSS v3 base score is 7.8 out of 10.
- Is CVE-2023-3777 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.