{"api_version":"1","generated_at":"2026-04-22T21:27:15+00:00","cve":"CVE-2023-31248","urls":{"html":"https://cve.report/CVE-2023-31248","api":"https://cve.report/api/cve/CVE-2023-31248.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2023-31248","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-31248"},"summary":{"title":"CVE-2023-31248","description":"Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace","state":"PUBLIC","assigner":"security@ubuntu.com","published_at":"2023-07-05 19:15:00","updated_at":"2024-02-01 17:15:00"},"problem_types":["CWE-416"],"metrics":[],"references":[{"url":"http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html","name":"http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html","refsource":"MISC","tags":[],"title":"Kernel Live Patch Security Notice LSN-0097-1 ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPHI46ROSSLVAV4R5LJWJYU747JGOS6D/","name":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPHI46ROSSLVAV4R5LJWJYU747JGOS6D/","refsource":"MISC","tags":[],"title":"[SECURITY] Fedora 38 Update: kernel-headers-6.4.4-200.fc38 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGZC5XOANA75OJ4XARBBXYSLDKUIJI5E/","name":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGZC5XOANA75OJ4XARBBXYSLDKUIJI5E/","refsource":"MISC","tags":[],"title":"[SECURITY] Fedora 37 Update: kernel-tools-6.4.4-100.fc37 - package-announce - Fedora Mailing-Lists","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html","name":"http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html","refsource":"MISC","tags":[],"title":"Kernel Live Patch Security Notice LSN-0096-1 ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.openwall.com/lists/oss-security/2023/07/05/2","name":"https://www.openwall.com/lists/oss-security/2023/07/05/2","refsource":"MISC","tags":[],"title":"oss-security - CVE-2023-31248 - Linux kernel nf_tables UAF when using\n nft_chain_lookup_byid","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lore.kernel.org/netfilter-devel/20230705121627.GC19489@breakpoint.cc/T/","name":"https://lore.kernel.org/netfilter-devel/20230705121627.GC19489@breakpoint.cc/T/","refsource":"MISC","tags":[],"title":"[PATCH] netfilter: nf_tables: do not ignore genmask when looking up chain by id","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html","name":"https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html","refsource":"MISC","tags":[],"title":"[SECURITY] [DLA 3512-1] linux-5.10 security update","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://security.netapp.com/advisory/ntap-20240201-0001/","name":"https://security.netapp.com/advisory/ntap-20240201-0001/","refsource":"","tags":[],"title":"CVE-2023-31248 Linux Kernel Vulnerability in NetApp Products | NetApp Product Security","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.debian.org/security/2023/dsa-5453","name":"https://www.debian.org/security/2023/dsa-5453","refsource":"MISC","tags":[],"title":"Debian -- Security Information -- DSA-5453-1 linux","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://www.openwall.com/lists/oss-security/2023/07/05/2","name":"http://www.openwall.com/lists/oss-security/2023/07/05/2","refsource":"MISC","tags":[],"title":"oss-security - CVE-2023-31248 - Linux kernel nf_tables UAF when using\n nft_chain_lookup_byid","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-31248","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31248","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2023","cve_id":"31248","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"14.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"esm","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"31248","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"16.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"esm","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"31248","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"18.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"lts","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"31248","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"20.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"lts","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"31248","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"22.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"lts","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"31248","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"11.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"31248","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"37","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"31248","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"38","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"31248","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"31248","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"5.9.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[{"cve":"CVE-2023-31248","qid":"160912","title":"Oracle Enterprise Linux Security Update for kernel (ELSA-2023-5069)"},{"cve":"CVE-2023-31248","qid":"199604","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6246-1)"},{"cve":"CVE-2023-31248","qid":"199607","title":"Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6247-1)"},{"cve":"CVE-2023-31248","qid":"199608","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6250-1)"},{"cve":"CVE-2023-31248","qid":"199610","title":"Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6248-1)"},{"cve":"CVE-2023-31248","qid":"199612","title":"Ubuntu Security Notification for Linux kernel (Intel IoTG) Vulnerabilities (USN-6255-1)"},{"cve":"CVE-2023-31248","qid":"199618","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6260-1)"},{"cve":"CVE-2023-31248","qid":"199651","title":"Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6285-1)"},{"cve":"CVE-2023-31248","qid":"242142","title":"Red Hat Update for kpatch-patch (RHSA-2023:5575)"},{"cve":"CVE-2023-31248","qid":"242154","title":"Red Hat Update for kernel (RHSA-2023:5604)"},{"cve":"CVE-2023-31248","qid":"242157","title":"Red Hat Update for kernel-rt (RHSA-2023:5603)"},{"cve":"CVE-2023-31248","qid":"284333","title":"Fedora Security Update for kernel (FEDORA-2023-e4e985b5dd)"},{"cve":"CVE-2023-31248","qid":"284334","title":"Fedora Security Update for kernel (FEDORA-2023-3661f028b8)"},{"cve":"CVE-2023-31248","qid":"355591","title":"Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.15-2023-024"},{"cve":"CVE-2023-31248","qid":"355616","title":"Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.10-2023-037"},{"cve":"CVE-2023-31248","qid":"355632","title":"Amazon Linux Security Advisory for kernel : ALAS2023-2023-251"},{"cve":"CVE-2023-31248","qid":"378710","title":"Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2023:0079)"},{"cve":"CVE-2023-31248","qid":"379043","title":"Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2023:0136)"},{"cve":"CVE-2023-31248","qid":"6000130","title":"Debian Security Update for linux-5.10 (DLA 3512-1)"},{"cve":"CVE-2023-31248","qid":"6000218","title":"Debian Security Update for linux (DSA 5453-1)"},{"cve":"CVE-2023-31248","qid":"6140082","title":"AWS Bottlerocket Security Update for kernel (GHSA-m78h-pwqc-ppq2)"},{"cve":"CVE-2023-31248","qid":"673354","title":"EulerOS Security Update for kernel (EulerOS-SA-2023-2843)"},{"cve":"CVE-2023-31248","qid":"673496","title":"EulerOS Security Update for kernel (EulerOS-SA-2023-2860)"},{"cve":"CVE-2023-31248","qid":"754919","title":"SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 9 for SLE 15 SP4) (SUSE-SU-2023:3773-1)"},{"cve":"CVE-2023-31248","qid":"754920","title":"SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5) (SUSE-SU-2023:3772-1)"},{"cve":"CVE-2023-31248","qid":"754922","title":"SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP5) (SUSE-SU-2023:3784-1)"},{"cve":"CVE-2023-31248","qid":"754923","title":"SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP4) (SUSE-SU-2023:3783-1)"},{"cve":"CVE-2023-31248","qid":"754990","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 23 for SLE 15 SP3) (SUSE-SU-2023:3892-1)"},{"cve":"CVE-2023-31248","qid":"755003","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 1 for SLE 15 SP5) (SUSE-SU-2023:3923-1)"},{"cve":"CVE-2023-31248","qid":"755004","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 13 for SLE 15 SP4) (SUSE-SU-2023:3922-1)"},{"cve":"CVE-2023-31248","qid":"755006","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 26 for SLE 15 SP3) (SUSE-SU-2023:3928-1)"},{"cve":"CVE-2023-31248","qid":"941249","title":"AlmaLinux Security Update for kernel (ALSA-2023:5069)"},{"cve":"CVE-2023-31248","qid":"941254","title":"AlmaLinux Security Update for kernel-rt (ALSA-2023:5091)"},{"cve":"CVE-2023-31248","qid":"961015","title":"Rocky Linux Security Update for kernel-rt (RLSA-2023:5091)"}]},"source_records":{"cve_program":{"data_version":"4.0","data_type":"CVE","data_format":"MITRE","CVE_data_meta":{"ID":"CVE-2023-31248","ASSIGNER":"security@ubuntu.com","STATE":"PUBLIC"},"description":{"description_data":[{"lang":"eng","value":"Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace"}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-416","cweId":"CWE-416"}]}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"Linux","product":{"product_data":[{"product_name":"Linux Kernel","version":{"version_data":[{"version_affected":"=","version_value":"v5.9-rc1"}]}}]}}]}},"references":{"reference_data":[{"url":"https://lore.kernel.org/netfilter-devel/20230705121627.GC19489@breakpoint.cc/T/","refsource":"MISC","name":"https://lore.kernel.org/netfilter-devel/20230705121627.GC19489@breakpoint.cc/T/"},{"url":"https://www.openwall.com/lists/oss-security/2023/07/05/2","refsource":"MISC","name":"https://www.openwall.com/lists/oss-security/2023/07/05/2"},{"url":"http://www.openwall.com/lists/oss-security/2023/07/05/2","refsource":"MISC","name":"http://www.openwall.com/lists/oss-security/2023/07/05/2"},{"url":"https://www.debian.org/security/2023/dsa-5453","refsource":"MISC","name":"https://www.debian.org/security/2023/dsa-5453"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPHI46ROSSLVAV4R5LJWJYU747JGOS6D/","refsource":"MISC","name":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPHI46ROSSLVAV4R5LJWJYU747JGOS6D/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGZC5XOANA75OJ4XARBBXYSLDKUIJI5E/","refsource":"MISC","name":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGZC5XOANA75OJ4XARBBXYSLDKUIJI5E/"},{"url":"http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html","refsource":"MISC","name":"http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html"},{"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html","refsource":"MISC","name":"https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html"},{"url":"http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html","refsource":"MISC","name":"http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html"}]},"credits":[{"lang":"en","value":"Mingi Cho"}],"impact":{"cvss":[{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH"}]}},"nvd":{"publishedDate":"2023-07-05 19:15:00","lastModifiedDate":"2024-02-01 17:15:00","problem_types":["CWE-416"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2","versionEndExcluding":"6.4.4","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16","versionEndExcluding":"6.1.39","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.11","versionEndExcluding":"5.15.121","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.9","versionEndExcluding":"5.10.188","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}