« List of all CVEs

CVE-2023-42753

Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

Published: 9/25/2023 Last updated: 8/6/2026 Reserved: 9/13/2023

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Metrics

Version Score Severity Vector String
3.1 7 High CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Opam packages affected (29)

albatross cdrom conf-bpftool conf-libbpf conf-linux-libc-dev core core_unix hvsock mirage-block-unix mm ocaml-probes ortools_solvers orun rawlink rawlink-eio rawlink-lwt restricted shell solo5 solo5-bindings-hvt solo5-bindings-spt solo5-cross-aarch64 solo5-kernel-ukvm tracy-client tuntap uring vhd-format vhd-format-lwt xapi-stdext-unix

Products affected (50)

Product Vendor Version
Red Hat Enterprise Linux 8.6 Extended Update Support Red Hat < 10.0.17763.3770
Red Hat Enterprise Linux 7 Red Hat n/a
Red Hat Enterprise Linux 8.2 Advanced Update Support Red Hat T&D Data Server (Japanese Edition) Ver.2.22 and earlier, T&D Data Server (English Edition) Ver.2.30 and earlier, THERMO RECORDER DATA SERVER (Japanese Edition) Ver.2.13 and earlier, and THERMO RECORDER DATA SERVER (English Edition) Ver.2.13 and earlier
Red Hat Enterprise Linux 8.2 Telecommunications Update Service Red Hat n/a
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions Red Hat n/a
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat n/a
Red Hat Enterprise Linux 8.4 Telecommunications Update Service Red Hat n/a
Red Hat Enterprise Linux 8.8 Extended Update Support Red Hat < 10.0.17763.3770
Red Hat Enterprise Linux 9 Red Hat < 10.0.19043.2364
Red Hat Enterprise Linux 9 Red Hat < 10.0.19042.2364
Red Hat Enterprise Linux 9.0 Extended Update Support Red Hat < 10.0.22000.1335
Red Hat Enterprise Linux 9.2 Extended Update Support Red Hat < 10.0.19045.2364
Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 Red Hat < 10.0.14393.5582
Red Hat Enterprise Linux 6 Red Hat < 6.1.7601.26266
Red Hat Enterprise Linux 7.7 Advanced Update Support Red Hat 5.0.0.57 (5.0.0.10.0.23307)
Red Hat Enterprise Linux 8.2 Telecommunications Update Service Red Hat n/a
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions Red Hat Versions prior to 22.5.5
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat n/a
Red Hat Enterprise Linux 8.4 Telecommunications Update Service Red Hat n/a
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions Red Hat n/a
Red Hat Enterprise Linux 8.6 Extended Update Support Red Hat < 5.4.7
Red Hat Enterprise Linux 9 Red Hat < OMS Agent for Linux GA v1.14.13
Red Hat Enterprise Linux 9 Red Hat n/a
Red Hat Enterprise Linux 9.0 Extended Update Support Red Hat < 10.0.17763.4645
Red Hat Enterprise Linux 9.2 Extended Update Support Red Hat < 6.2.9200.24374
Red Hat Enterprise Linux 6 Red Hat 7.5
Red Hat Enterprise Linux 8.4 Telecommunications Update Service Red Hat n/a
Red Hat Enterprise Linux 9 Red Hat < 2022.5.309.0
Red Hat Enterprise Linux 8 Red Hat < 13.5.0
Red Hat Enterprise Linux 7 Red Hat 1.12.0
Red Hat Enterprise Linux 9.0 Extended Update Support Red Hat < 10.0.10240.20048
Red Hat Enterprise Linux 9.0 Extended Update Support Red Hat < 10.0.19044.2364
Red Hat Enterprise Linux 8.2 Telecommunications Update Service Red Hat n/a
Red Hat Enterprise Linux 8.4 Telecommunications Update Service Red Hat n/a
Red Hat Enterprise Linux 9.2 Extended Update Support Red Hat < 10.0.10240.19624
Red Hat Enterprise Linux 7 Red Hat n/a
Red Hat Enterprise Linux 8.2 Telecommunications Update Service Red Hat n/a
Red Hat Enterprise Linux 9 Red Hat < 6.3.9600.20721
Red Hat Enterprise Linux 9.0 Extended Update Support Red Hat < 6.1.7601.26623
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions Red Hat n/a
Red Hat Enterprise Linux 7 Red Hat < V1.02*
Red Hat Enterprise Linux 8.6 Extended Update Support Red Hat 0.8.0
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions Red Hat n/a
Red Hat Enterprise Linux 8.6 Extended Update Support Red Hat < 10.0.17763.3770
Red Hat Enterprise Linux 8.8 Extended Update Support Red Hat < 10.0.17763.3770
Red Hat Enterprise Linux 9 Red Hat < 10.0.20348.1366
Red Hat Enterprise Linux 8.8 Extended Update Support Red Hat < LAD v4.0.27 and LAD v3.0.137
Red Hat Enterprise Linux 9.0 Extended Update Support Red Hat < 10.0.22621.993
Red Hat Enterprise Linux 9.2 Extended Update Support Red Hat < 10.0.14393.5582
Red Hat Enterprise Linux 9 Red Hat < 10.22.1024.0

References (120)