In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
Fix
Public exploits 8
- Destawell/gemini-2.5-pro-nf-tables-red-teamin PoC on GitHub
- Destawell/gemini-2.5-pro-nf-tables-red-teaming PoC on GitHub
- Liuk3r/CVE-2023-32233 PoC on GitHub
- PIDAN-HEIDASHUAI/CVE-2023-32233 PoC on GitHub
- RogelioPumajulca/TEST-CVE-2023-32233 PoC on GitHub
- adeadukagi/CVE-2023-32233-reproduction PoC on GitHub
- oferchen/POC-CVE-2023-32233 PoC on GitHub
- void0red/CVE-2023-32233 PoC on GitHub
Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.
Patch, vendor advisory and mitigation references on NVD 10
- http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html Patch, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2196105 Issue Tracking, Mitigation, Third Party Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab Mailing List, Patch
- https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab Patch
- https://www.openwall.com/lists/oss-security/2023/05/08/4 Mailing List, Patch, Third Party Advisory
- http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html Patch, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2196105 Issue Tracking, Mitigation, Third Party Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab Mailing List, Patch
- https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab Patch
- https://www.openwall.com/lists/oss-security/2023/05/08/4 Mailing List, Patch, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.8 · linux, redhat, netappNVD modified 2026-10-15 00:16
Affected (CPE criteria) 9
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:*cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:*cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:*cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:*cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:*
References 24
- http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/05/15/5 Mailing List, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2196105 Issue Tracking, Mitigation, Third Party Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab Mailing List, Patch
- https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab Patch
- https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing List, Third Party Advisory
- https://news.ycombinator.com/item?id=35879660 Issue Tracking
- https://security.netapp.com/advisory/ntap-20230616-0002/ Mailing List, Third Party Advisory
- https://www.debian.org/security/2023/dsa-5402 Mailing List, Third Party Advisory
- https://www.openwall.com/lists/oss-security/2023/05/08/4 Mailing List, Patch, Third Party Advisory
- http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/05/15/5 Mailing List, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2196105 Issue Tracking, Mitigation, Third Party Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab Mailing List, Patch
- https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab Patch
- https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing List, Third Party Advisory
- https://news.ycombinator.com/item?id=35879660 Issue Tracking
- https://security.netapp.com/advisory/ntap-20230616-0002/ Mailing List, Third Party Advisory
- https://www.debian.org/security/2023/dsa-5402 Mailing List, Third Party Advisory
- https://www.openwall.com/lists/oss-security/2023/05/08/4 Mailing List, Patch, Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://cert-portal.siemens.com/productcert/html/ssa-806742.html