CVE-2023-42753

Published: Sep 25, 2023

Modified: Feb 18, 2026

PUBLISHED

CVSS v3.1

7.0

HIGH

Description

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux 7	unaffected `0:3.10.0-1160.108.1.rt56.1259.el7 - < *`
Red Hat	Red Hat Enterprise Linux 7	unaffected `0:3.10.0-1160.108.1.el7 - < *`
Red Hat	Red Hat Enterprise Linux 7	All versions
Red Hat	Red Hat Enterprise Linux 7.7 Advanced Update Support	unaffected `0:3.10.0-1062.85.1.el7 - < *`
Red Hat	Red Hat Enterprise Linux 8	unaffected `0:4.18.0-513.11.1.rt7.313.el8_9 - < *`
Red Hat	Red Hat Enterprise Linux 8	All versions
Red Hat	Red Hat Enterprise Linux 8	unaffected `0:4.18.0-513.11.1.el8_9 - < *`
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	unaffected `0:4.18.0-193.120.1.el8_2 - < *`
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	unaffected `0:4.18.0-193.120.1.rt13.171.el8_2 - < *`
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	unaffected `0:4.18.0-193.120.1.el8_2 - < *`
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	All versions
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	unaffected `0:4.18.0-193.120.1.el8_2 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	unaffected `0:4.18.0-305.120.1.el8_4 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	unaffected `0:4.18.0-305.120.1.rt7.196.el8_4 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	unaffected `0:4.18.0-305.120.1.el8_4 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	unaffected `0:4.18.0-305.120.1.el8_4 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	All versions
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	All versions
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	unaffected `0:4.18.0-372.87.1.el8_6 - < *`
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	unaffected `0:4.18.0-477.36.1.el8_8 - < *`
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	All versions
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:5.14.0-362.18.1.el9_3 - < *`
Red Hat	Red Hat Enterprise Linux 9	All versions
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:5.14.0-362.18.1.el9_3 - < *`
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	unaffected `0:5.14.0-70.80.1.el9_0 - < *`
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	unaffected `0:5.14.0-70.80.1.rt21.151.el9_0 - < *`
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	All versions
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	unaffected `0:5.14.0-284.40.1.el9_2 - < *`
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	unaffected `0:5.14.0-284.40.1.rt14.325.el9_2 - < *`
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	All versions
Red Hat	Red Hat Virtualization 4 for Red Hat Enterprise Linux 8	unaffected `0:4.18.0-372.87.1.el8_6 - < *`
Red Hat	Red Hat Enterprise Linux 6	All versions
Red Hat	Red Hat Enterprise Linux 9	All versions