CVE-2023-5972

Опубликовано: 23 нояб. 2023

Источник: nvd

CVSS3: 7

CVSS3: 7.8

EPSS Низкий

Описание

A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system.

Ссылки

https://access.redhat.com/security/cve/CVE-2023-5972
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2248189
Issue Tracking
Patch
https://github.com/torvalds/linux/commit/505ce0630ad5d31185695f8a29dde8d29f28faa7
Patch
https://github.com/torvalds/linux/commit/52177bbf19e6e9398375a148d2e13ed492b40b80
Patch
https://access.redhat.com/security/cve/CVE-2023-5972
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2248189
Issue Tracking
Patch
https://github.com/torvalds/linux/commit/505ce0630ad5d31185695f8a29dde8d29f28faa7
Patch
https://github.com/torvalds/linux/commit/52177bbf19e6e9398375a148d2e13ed492b40b80
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2.1 (включая) до 6.5.10 (включая)

cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.2:rc7:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.2:rc8:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.2.0:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.2.0:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.2.0:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.2.0:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.2.0:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.2.0:rc6:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.6:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.6:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.6:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.6:rc6:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

EPSS

Процентиль: 2%

0.00015

Низкий

7 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVE-2023-5972

CVSS3: 7

ubuntu

около 2 лет назад

CVE-2023-5972

CVSS3: 5.5

redhat

больше 2 лет назад

CVE-2023-5972

CVSS3: 7.8

msrc

около 2 лет назад

Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c

CVE-2023-5972

CVSS3: 7

debian

около 2 лет назад

A null pointer dereference flaw was found in the nft_inner.c functiona ...

GHSA-8jhq-62jp-gh72

CVSS3: 7

github

около 2 лет назад

EPSS

Процентиль: 2%

0.00015

Низкий

7 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-476