CVE-2023-42753 — Out-of-bounds Write in Kernel
Severity
7.8HIGHNVD
CNA7.0OSV7.0OSV5.7OSV5.5OSV4.7
EPSS
0.0%
top 97.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 25
Latest updateJun 11
Description
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages3 packages
Also affects: Debian Linux 10.0, Enterprise Linux 7.0, 8.0, 9.0
🔴Vulnerability Details
21📋Vendor Advisories
21📄Research Papers
1arXiv▶
Mono: Is Your "Clean" Vulnerability Dataset Really Solvable? Exposing and Trapping Undecidable Patches and Beyond↗2025-06-11
💬Community
1Bugzilla▶
CVE-2023-42753 kernel: netfilter: potential slab-out-of-bound access due to integer underflow↗2023-09-20