Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2023-31248: Linux kernel nftables can let attackers gain admin rights
CVE-2023-31248 · published 3 years ago
Summary
The Linux kernel component that handles network filtering (nftables) can be tricked into using memory that has already been freed. This flaw could allow a local user to elevate their privileges to full system administrator level. Update the affected Linux distributions or apply the provided security patches to fix the issue.
What to do
- Update canonical linux-aws-5.15 to version 5.15.0-1040.45~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1042.49~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1038.46~20.04.1.
- Update canonical linux-gke-5.15 to version 5.15.0-1038.43~20.04.1.
- Update canonical linux-gkeop-5.15 to version 5.15.0-1024.29~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-78.85~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1036.41~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-78.85~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1016.16~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1039.45~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1037.41~20.04.2.
- Update canonical linux to version 5.15.0-78.85.
- Update canonical linux-aws to version 5.15.0-1040.45.
- Update canonical linux-aws-5.19 to version 5.19.0-1029.30~22.04.1.
- Update canonical linux-azure to version 5.15.0-1042.49.
- Update canonical linux-azure-fde to version 5.15.0-1042.49.1.
- Update canonical linux-gcp to version 5.15.0-1038.46.
- Update canonical linux-gcp-5.19 to version 5.19.0-1030.32~22.04.1.
- Update canonical linux-gke to version 5.15.0-1038.43.
- Update canonical linux-gkeop to version 5.15.0-1024.29.
- Update canonical linux-hwe-5.19 to version 5.19.0-50.50.
- Update canonical linux-hwe-6.2 to version 6.2.0-26.26~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1034.37.
- Update canonical linux-intel-iotg to version 5.15.0-1036.41.
- Update canonical linux-kvm to version 5.15.0-1038.43.
- Update canonical linux-lowlatency to version 5.15.0-78.85.
- Update canonical linux-nvidia to version 5.15.0-1029.29.
- Update canonical linux-nvidia-tegra to version 5.15.0-1016.16.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1002.2.
- Update canonical linux-oem-5.17 to version 5.17.0-1035.36.
- Update canonical linux-oem-6.0 to version 6.0.0-1020.20.
- Update canonical linux-oem-6.1 to version 6.1.0-1019.19.
- Update canonical linux-oracle to version 5.15.0-1039.45.
- Update canonical linux-raspi to version 5.15.0-1034.37.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1025.29.
- Update canonical linux-bluefield to version 5.15.0-1021.23.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1035.37.
- Update canonical linux-realtime to version 5.15.0-1042.47.
- Update debian linux to version 6.1.38-1.
- Update debian linux to version 6.4.4-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1040.45~20.04.1 Fix: upgrade to 5.15.0-1040.45~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1042.49~20.04.1 Fix: upgrade to 5.15.0-1042.49~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1038.46~20.04.1 Fix: upgrade to 5.15.0-1038.46~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 |
< 5.15.0-1038.43~20.04.1 Fix: upgrade to 5.15.0-1038.43~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 |
< 5.15.0-1024.29~20.04.1 Fix: upgrade to 5.15.0-1024.29~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-78.85~20.04.1 Fix: upgrade to 5.15.0-78.85~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1036.41~20.04.1 Fix: upgrade to 5.15.0-1036.41~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-78.85~20.04.1 Fix: upgrade to 5.15.0-78.85~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1016.16~20.04.1 Fix: upgrade to 5.15.0-1016.16~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1039.45~20.04.1 Fix: upgrade to 5.15.0-1039.45~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1037.41~20.04.2 Fix: upgrade to 5.15.0-1037.41~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
Showing 50 of 99. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-78.85 Fix: upgrade to 5.15.0-78.85
|
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1040.45 Fix: upgrade to 5.15.0-1040.45
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 |
< 5.19.0-1029.30~22.04.1 Fix: upgrade to 5.19.0-1029.30~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1042.49 Fix: upgrade to 5.15.0-1042.49
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1042.49.1 Fix: upgrade to 5.15.0-1042.49.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1038.46 Fix: upgrade to 5.15.0-1038.46
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 |
< 5.19.0-1030.32~22.04.1 Fix: upgrade to 5.19.0-1030.32~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1038.43 Fix: upgrade to 5.15.0-1038.43
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1024.29 Fix: upgrade to 5.15.0-1024.29
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 |
< 5.19.0-50.50 Fix: upgrade to 5.19.0-50.50
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 |
< 6.2.0-26.26~22.04.1 Fix: upgrade to 6.2.0-26.26~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1034.37 Fix: upgrade to 5.15.0-1034.37
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1036.41 Fix: upgrade to 5.15.0-1036.41
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1038.43 Fix: upgrade to 5.15.0-1038.43
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-78.85 Fix: upgrade to 5.15.0-78.85
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1029.29 Fix: upgrade to 5.15.0-1029.29
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1016.16 Fix: upgrade to 5.15.0-1016.16
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1002.2 Fix: upgrade to 5.15.0-1002.2
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 |
< 5.17.0-1035.36 Fix: upgrade to 5.17.0-1035.36
|
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 |
< 6.0.0-1020.20 Fix: upgrade to 6.0.0-1020.20
|
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 |
< 6.1.0-1019.19 Fix: upgrade to 6.1.0-1019.19
|
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1039.45 Fix: upgrade to 5.15.0-1039.45
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1034.37 Fix: upgrade to 5.15.0-1034.37
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1025.29 Fix: upgrade to 5.15.0-1025.29
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1021.23 Fix: upgrade to 5.15.0-1021.23
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1035.37 Fix: upgrade to 5.15.0-1035.37
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1042.47 Fix: upgrade to 5.15.0-1042.47
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Debian:12 | debian | linux |
< 6.1.38-1 Fix: upgrade to 6.1.38-1
|
| Debian:13 | debian | linux |
< 6.4.4-1 Fix: upgrade to 6.4.4-1
|
| Debian:14 | debian | linux |
< 6.4.4-1 Fix: upgrade to 6.4.4-1
|
| – | linux | linux_kernel |
>= 5.9, < 5.10.188 >= 5.11, < 5.15.121 >= 5.16, < 6.1.39 >= 6.2, < 6.4.4 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | fedoraproject | fedora |
37 38 cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* |
| – | debian | debian_linux |
11.0 cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
| – | canonical | ubuntu_linux |
14.04 16.04 18.04 20.04 22.04 cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* |
Original advisory text
Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network names...
Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace
References
- https://ubuntu.com/security/CVE-2023-31248 Third Party Advisory
- https://lore.kernel.org/netfilter-devel/[email protected]/T/ Third Party Advisory
- https://www.openwall.com/lists/oss-security/2023/07/05/2 Third Party Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-23-899/ Third Party Advisory
- https://ubuntu.com/security/notices/USN-6250-1 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2023-31248 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6246-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6247-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6248-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6255-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6260-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6285-1 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-31248 Third Party Advisory
- http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LS... Third Party Advisory VDB Entry
- http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LS... Third Party Advisory VDB Entry
- http://www.openwall.com/lists/oss-security/2023/07/05/2 Mailing List Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html Third Party Advisory VDB Entry
- https://lists.fedoraproject.org/archives/list/[email protected]... Mailing List
- https://lists.fedoraproject.org/archives/list/[email protected]... Mailing List
- https://security.netapp.com/advisory/ntap-20240201-0001/
- https://www.debian.org/security/2023/dsa-5453 Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-416Use After Free
Timeline
Published5 Jul 2023
Updated3 Nov 2026
First seen21 Aug 2026
Track software like this
Free during beta