ZeroHour

CVE-2023-31248

CVSS 3.1
7.8 high
EPSS
2%p80
Published
()
Modified
Description

Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace

Vendors
linuxfedoraprojectdebiancanonical
Products
linux kernel, fedora, debian linux, ubuntu linux
Weakness
CWE-416
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news