In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
[
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/netfilter/nft_objref.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c1592a89942e9678f7d9c8030efa777c0d57edab",
"id": "CVE-2023-32233-1e562803",
"digest": {
"line_hashes": [
"34364966155088282259297693262686434297",
"200992974562373335832403291009177879793",
"71978844835201334026751984213909561431",
"137852100027518460927835069030760629916"
],
"threshold": 0.9
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/netfilter/nft_lookup.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c1592a89942e9678f7d9c8030efa777c0d57edab",
"id": "CVE-2023-32233-45091144",
"digest": {
"line_hashes": [
"188325255223969532833404623468443238337",
"166768278987056024155491066285619855812",
"147469078759232080699198674373569756742",
"200897458452960096890777243691180068877"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "nf_tables_deactivate_set"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c1592a89942e9678f7d9c8030efa777c0d57edab",
"id": "CVE-2023-32233-475be21a",
"digest": {
"function_hash": "210175554246699352144095226109425930919",
"length": 316.0
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/netfilter/nft_lookup.c",
"function": "nft_lookup_activate"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c1592a89942e9678f7d9c8030efa777c0d57edab",
"id": "CVE-2023-32233-4a125ad6",
"digest": {
"function_hash": "151194526192571934040158940591020780184",
"length": 129.0
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c1592a89942e9678f7d9c8030efa777c0d57edab",
"id": "CVE-2023-32233-5d2b2db1",
"digest": {
"line_hashes": [
"170043072612515115853431938142000076721",
"138123437481234919463490066218341111453",
"236241760602437176065898500907223301878",
"117675707067085739469112169527070604754",
"332440699730513737737695324707135130294",
"15995877793860056777994553342669971366",
"222650538489337567846637889187900982605",
"235239389915037902637096194470485294085",
"221114409261639605015564511144943526039"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/netfilter/nft_dynset.c",
"function": "nft_dynset_activate"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c1592a89942e9678f7d9c8030efa777c0d57edab",
"id": "CVE-2023-32233-7b9824b3",
"digest": {
"function_hash": "151194526192571934040158940591020780184",
"length": 129.0
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "include/net/netfilter/nf_tables.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c1592a89942e9678f7d9c8030efa777c0d57edab",
"id": "CVE-2023-32233-8a44964e",
"digest": {
"line_hashes": [
"46115750774236441829470473602516681194",
"239636216844694294271677381233527608007",
"28029387721302031168787107199407852509",
"268346562014789895878127132710490848370"
],
"threshold": 0.9
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/netfilter/nft_dynset.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c1592a89942e9678f7d9c8030efa777c0d57edab",
"id": "CVE-2023-32233-c8364f33",
"digest": {
"line_hashes": [
"33378906286776319313767726453718612586",
"66738136913867355963087873380192275943",
"66601913195440914313937186474111190917",
"282552767556273853714032946152374502498"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/netfilter/nft_objref.c",
"function": "nft_objref_map_activate"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c1592a89942e9678f7d9c8030efa777c0d57edab",
"id": "CVE-2023-32233-cc2ba549",
"digest": {
"function_hash": "151194526192571934040158940591020780184",
"length": 129.0
}
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-32233.json"