QwikSec

Security Database

CVE

CWE

Training

CVE-2023-5972

Published: Nov 23, 2023

Modified: Aug 2, 2024

PUBLISHED

CVSS v3.1

7.0

HIGH

Description

A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system.

Vendor	Product	Versions
n/a	kernel	All versions
Red Hat	Red Hat Enterprise Linux 6	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions
Red Hat	Red Hat Enterprise Linux 8	All versions
Red Hat	Red Hat Enterprise Linux 8	All versions
Red Hat	Red Hat Enterprise Linux 9	All versions
Red Hat	Red Hat Enterprise Linux 9	All versions
Fedora	Fedora	All versions

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

References

https://access.redhat.com/security/cve/CVE-2023-5972

vdb-entry

x_refsource_REDHAT

issue-tracking

x_refsource_REDHAT

https://github.com/torvalds/linux/commit/505ce0630ad5d31185695f8a29dde8d29f28faa7

https://github.com/torvalds/linux/commit/52177bbf19e6e9398375a148d2e13ed492b40b80

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.