CVE-2023-35001 — Out-of-bounds Write in Kernel
Severity
7.8HIGHNVD
OSV7.1OSV5.7OSV5.5OSV5.3OSV4.7
EPSS
0.2%
top 56.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 5
Latest updateApr 15
Description
Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages6 packages
Also affects: Debian Linux 11.0, Fedora 37, 38
Patches
🔴Vulnerability Details
15📋Vendor Advisories
21💬Community
1Bugzilla
▶