CVE-2023-3390

Use-after-free in Linux kernel's netfilter subsystem

HIGH

7.8

CVSS Score

Published: June 28, 2023 at 08:02 PM UTC

Updated: July 22, 2026 at 12:27 PM UTC

6 products affected across 2 vendorsLinux KernelH700SH500S

Using Linux Kernel by Linux?

Get instant alerts when new vulnerabilities affect Linux Kernel - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.9%

Description

A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue. We recommend upgrading past commit 1240eb93f0616b21c675416516ff3d74798fdc97.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

3.16 ≤ v < 4.14.3224.15 ≤ v < 4.19.2914.20 ≤ v < 5.4.2515.11 ≤ v < 5.15.1185.16 ≤ v < 6.1.355.5 ≤ v < 5.10.1886.2 ≤ v < 6.3.93.16 4.15 4.20 5.11 5.16 5.5 6.2

Affected range stops below 4.14.322, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.19.291, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.10.188, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.15.118, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.4.251, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.1.35, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.3.9, so it looks safe — our inference, not a vendor statement

H300S · NetApp

95%

All versions

H410C · NetApp

95%