Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
Summary
| CVE | CVE-2023-42753 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-09-25 21:15:15 UTC |
| Updated | 2026-08-06 22:16:37 UTC |
| Description | An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system. |
Risk And Classification
Primary CVSS: v3.1 7.8 HIGH from [email protected]
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Problem Types: CWE-787 | CWE-787 Out-of-bounds Write
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Primary | 7.8 | HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | [email protected] | Secondary | 7 | HIGH | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | CNA | CVSS | 7 | HIGH | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Red Hat | Red Hat Enterprise Linux 7 | unaffected 0:3.10.0-1160.108.1.rt56.1259.el7 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 7 | unaffected 0:3.10.0-1160.108.1.el7 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 7 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 7.7 Advanced Update Support | unaffected 0:3.10.0-1062.85.1.el7 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | unaffected 0:4.18.0-513.11.1.rt7.313.el8_9 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | unaffected 0:4.18.0-513.11.1.el8_9 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support | unaffected 0:4.18.0-193.120.1.el8_2 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.2 Telecommunications Update Service | unaffected 0:4.18.0-193.120.1.rt13.171.el8_2 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.2 Telecommunications Update Service | unaffected 0:4.18.0-193.120.1.el8_2 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.2 Update Services For SAP Solutions | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.2 Update Services For SAP Solutions | unaffected 0:4.18.0-193.120.1.el8_2 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | unaffected 0:4.18.0-305.120.1.el8_4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | unaffected 0:4.18.0-305.120.1.rt7.196.el8_4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | unaffected 0:4.18.0-305.120.1.el8_4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.4 Update Services For SAP Solutions | unaffected 0:4.18.0-305.120.1.el8_4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.4 Update Services For SAP Solutions | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | unaffected 0:4.18.0-372.87.1.el8_6 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | unaffected 0:4.18.0-477.36.1.el8_8 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 0:5.14.0-362.18.1.el9_3 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 0:5.14.0-362.18.1.el9_3 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | unaffected 0:5.14.0-70.80.1.el9_0 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | unaffected 0:5.14.0-70.80.1.rt21.151.el9_0 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | unaffected 0:5.14.0-284.40.1.el9_2 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | unaffected 0:5.14.0-284.40.1.rt14.325.el9_2 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | Not specified | Not specified |
| CNA | Red Hat | Red Hat Virtualization 4 For Red Hat Enterprise Linux 8 | unaffected 0:4.18.0-372.87.1.el8_6 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 6 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | Not specified | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| oss-sec: [CVE-2023-42753] Array Indexing error in Linux kernel | af854a3a-2127-422b-91ae-364da2661108 | seclists.org | Exploit, Mailing List, Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| access.redhat.com/errata/RHSA-2024:0999 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| [SECURITY] [DLA 3623-1] linux-5.10 security update | af854a3a-2127-422b-91ae-364da2661108 | lists.debian.org | |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| oss-security - [CVE-2023-42753] Array Indexing error in Linux kernel | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| 2239843 – (CVE-2023-42753) CVE-2023-42753 kernel: netfilter: potential slab-out-of-bound access due to integer underflow | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | Issue Tracking |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Kernel Live Patch Security Notice LSN-0099-1 ≈ Packet Storm | af854a3a-2127-422b-91ae-364da2661108 | packetstormsecurity.com | |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| Red Hat | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| cve-details | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | Third Party Advisory |
| lists.debian.org/debian-lts-announce/2024/01/msg00004.html | af854a3a-2127-422b-91ae-364da2661108 | lists.debian.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Additional Advisory Data
| Source | Time | Event |
|---|---|---|
| CNA | 2023-09-20T00:00:00.000Z | Reported to Red Hat. |
| CNA | 2023-09-22T00:00:00.000Z | Made public. |
Workarounds
CNA: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.
Legacy QID Mappings
- 160938 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2023-12824)
- 160939 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2023-12826)
- 160942 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2023-12825)
- 160963 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2023-12858)
- 160977 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2023-12875)
- 160978 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2023-12874)
- 160982 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2023-12911)
- 160985 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2023-12910)
- 160989 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2023-12915)
- 160991 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel-container (ELSA-2023-12914)
- 161277 Oracle Enterprise Linux Security Update for kernel (ELSA-2024-12069)
- 161318 Oracle Enterprise Linux Security Update for kernel (ELSA-2024-12094)
- 161377 Oracle Enterprise Linux Security Update for kernel (ELSA-2024-0346)
- 161404 Oracle Enterprise Linux Security Update for kernel (ELSA-2024-0461)
- 199803 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6415-1)
- 199841 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6444-1)
- 199842 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6440-1)
- 199843 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6439-1)
- 199844 Ubuntu Security Notification for Linux kernel (Intel IoTG) Vulnerabilities (USN-6445-1)
- 199845 Ubuntu Security Notification for Linux kernel (BlueField) Vulnerabilities (USN-6442-1)
- 199846 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6441-1)
- 199848 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6446-1)
- 199849 Ubuntu Security Notification for Linux kernel (Azure) Vulnerabilities (USN-6440-2)
- 199854 Ubuntu Security Notification for Linux kernel (GCP) Vulnerabilities (USN-6441-2)
- 199855 Ubuntu Security Notification for Linux kernel (AWS) Vulnerabilities (USN-6439-2)
- 199858 Ubuntu Security Notification for Linux kernel (Intel IoTG) Vulnerabilities (USN-6445-2)
- 199859 Ubuntu Security Notification for Linux kernel (StarFive) Vulnerabilities (USN-6444-2)
- 199861 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6446-2)
- 199864 Ubuntu Security Notification for Linux kernel (HWE) Vulnerabilities (USN-6440-3)
- 199868 Ubuntu Security Notification for Linux kernel (Oracle) Vulnerabilities (USN-6446-3)
- 199872 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6441-3)
- 199883 Ubuntu Security Notification for Linux kernel (NVIDIA) Vulnerabilities (USN-6466-1)
- 242481 Red Hat Update for kernel (RHSA-2023:7382)
- 242482 Red Hat Update for kernel-rt (RHSA-2023:7379)
- 242483 Red Hat Update for kernel-rt (RHSA-2023:7389)
- 242489 Red Hat Update for kpatch-patch (RHSA-2023:7411)
- 242497 Red Hat Update for kpatch-patch (RHSA-2023:7418)
- 242518 Red Hat Update for kpatch-patch (RHSA-2023:7558)
- 242521 Red Hat Update for kernel security (RHSA-2023:7539)
- 242612 Red Hat Update for kernel security (RHSA-2023:7370)
- 242727 Red Hat Update for kpatch-patch (RHSA-2024:0340)
- 242728 Red Hat Update for kpatch-patch (RHSA-2024:0378)
- 242729 Red Hat Update for kernel (RHSA-2024:0346)
- 242731 Red Hat Update for kpatch-patch (RHSA-2024:0376)
- 242733 Red Hat Update for kpatch-patch (RHSA-2024:0371)
- 242762 Red Hat Update for kernel (RHSA-2024:0403)
- 242785 Red Hat Update for kpatch-patch (RHSA-2024:0593)
- 242830 Red Hat Update for kernel-rt (RHSA-2024:0563)
- 242831 Red Hat Update for kernel (RHSA-2024:0562)
- 242839 Red Hat Update for kernel (RHSA-2024:0461)
- 242855 Red Hat Update for kernel (RHSA-2024:0412)
- 242862 Red Hat Update for kernel-rt (RHSA-2024:0402)
- 242864 Red Hat Update for kernel-rt (RHSA-2024:0347)
- 257299 CentOS Security Update for kernel (CESA-2024:0346)
- 356357 Amazon Linux Security Advisory for kernel : ALAS-2023-1838
- 356572 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.10-2023-040
- 356606 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.4-2023-053
- 379043 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2023:0136)
- 6000265 Debian Security Update for linux-5.10 (DLA 3623-1)
- 6000429 Debian Security Update for linux (DLA 3710-1)
- 6140024 AWS Bottlerocket Security Update for kernel (GHSA-f72p-76xv-4992)
- 6140102 AWS Bottlerocket Security Update for kernel (GHSA-f72p-76xv-4992)
- 673406 EulerOS Security Update for kernel (EulerOS-SA-2023-3182)
- 673595 EulerOS Security Update for kernel (EulerOS-SA-2023-3247)
- 673644 EulerOS Security Update for kernel (EulerOS-SA-2023-3336)
- 673692 EulerOS Security Update for kernel (EulerOS-SA-2023-3275)
- 673848 EulerOS Security Update for kernel (EulerOS-SA-2023-3217)
- 673995 EulerOS Security Update for kernel (EulerOS-SA-2024-1275)
- 674042 EulerOS Security Update for kernel (EulerOS-SA-2023-3304)
- 755059 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4035-1)
- 755061 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4030-1)
- 755082 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4058-1)
- 755083 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4057-1)
- 755085 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4072-1)
- 755086 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4071-1)
- 755096 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4093-1)
- 755107 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4095-1)
- 755229 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4072-2)
- 756098 SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP5) (SUSE-SU-2024:1181-1)
- 756100 SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP5) (SUSE-SU-2024:1183-1)
- 756111 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 3 for SLE 15 SP5) (SUSE-SU-2024:1236-1)
- 756113 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 36 for SLE 15 SP3) (SUSE-SU-2024:1246-1)
- 756115 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 5 for SLE 15 SP5) (SUSE-SU-2024:1251-1)
- 756116 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 35 for SLE 15 SP3) (SUSE-SU-2024:1249-1)
- 756118 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 1 for SLE 15 SP5) (SUSE-SU-2024:1252-1)
- 756122 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 40 for SLE 15 SP2) (SUSE-SU-2024:1257-1)
- 907392 Common Base Linux Mariner (CBL-Mariner) Security Update for hyperv-daemons (30054-1)
- 907427 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (30050)
- 907590 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (30050-1)
- 941540 AlmaLinux Security Update for kernel (ALSA-2024:0113)
- 961107 Rocky Linux Security Update for kernel-rt (RLSA-2024:0134)