In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-32233.json"
[
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"34364966155088282259297693262686434297",
"200992974562373335832403291009177879793",
"71978844835201334026751984213909561431",
"137852100027518460927835069030760629916"
]
},
"source": "https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab",
"signature_type": "Line",
"id": "CVE-2023-32233-236f3406",
"target": {
"file": "net/netfilter/nft_objref.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"33378906286776319313767726453718612586",
"66738136913867355963087873380192275943",
"66601913195440914313937186474111190917",
"282552767556273853714032946152374502498"
]
},
"source": "https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab",
"signature_type": "Line",
"id": "CVE-2023-32233-2769da93",
"target": {
"file": "net/netfilter/nft_dynset.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "151194526192571934040158940591020780184",
"length": 129.0
},
"source": "https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab",
"signature_type": "Function",
"id": "CVE-2023-32233-39dd0110",
"target": {
"file": "net/netfilter/nft_dynset.c",
"function": "nft_dynset_activate"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"170043072612515115853431938142000076721",
"138123437481234919463490066218341111453",
"236241760602437176065898500907223301878",
"117675707067085739469112169527070604754",
"332440699730513737737695324707135130294",
"15995877793860056777994553342669971366",
"222650538489337567846637889187900982605",
"235239389915037902637096194470485294085",
"221114409261639605015564511144943526039"
]
},
"source": "https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab",
"signature_type": "Line",
"id": "CVE-2023-32233-51d993a1",
"target": {
"file": "net/netfilter/nf_tables_api.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"188325255223969532833404623468443238337",
"166768278987056024155491066285619855812",
"147469078759232080699198674373569756742",
"200897458452960096890777243691180068877"
]
},
"source": "https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab",
"signature_type": "Line",
"id": "CVE-2023-32233-909f4d39",
"target": {
"file": "net/netfilter/nft_lookup.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "151194526192571934040158940591020780184",
"length": 129.0
},
"source": "https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab",
"signature_type": "Function",
"id": "CVE-2023-32233-ace6a792",
"target": {
"file": "net/netfilter/nft_lookup.c",
"function": "nft_lookup_activate"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"46115750774236441829470473602516681194",
"239636216844694294271677381233527608007",
"28029387721302031168787107199407852509",
"268346562014789895878127132710490848370"
]
},
"source": "https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab",
"signature_type": "Line",
"id": "CVE-2023-32233-d0c4870b",
"target": {
"file": "include/net/netfilter/nf_tables.h"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "210175554246699352144095226109425930919",
"length": 316.0
},
"source": "https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab",
"signature_type": "Function",
"id": "CVE-2023-32233-f8f07e5e",
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "nf_tables_deactivate_set"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "151194526192571934040158940591020780184",
"length": 129.0
},
"source": "https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab",
"signature_type": "Function",
"id": "CVE-2023-32233-fed03d3d",
"target": {
"file": "net/netfilter/nft_objref.c",
"function": "nft_objref_map_activate"
}
}
]