{"api_version":"1","generated_at":"2026-04-22T23:52:43+00:00","cve":"CVE-2023-3390","urls":{"html":"https://cve.report/CVE-2023-3390","api":"https://cve.report/api/cve/CVE-2023-3390.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2023-3390","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-3390"},"summary":{"title":"CVE-2023-3390","description":"A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c.\n\nMishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue.\n\nWe recommend upgrading past commit 1240eb93f0616b21c675416516ff3d74798fdc97.","state":"PUBLIC","assigner":"security@google.com","published_at":"2023-06-28 21:15:00","updated_at":"2024-03-27 14:11:00"},"problem_types":["CWE-416"],"metrics":[],"references":[{"url":"https://kernel.dance/1240eb93f0616b21c675416516ff3d74798fdc97","name":"https://kernel.dance/1240eb93f0616b21c675416516ff3d74798fdc97","refsource":"MISC","tags":[],"title":"","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html","name":"http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html","refsource":"MISC","tags":[],"title":"Kernel Live Patch Security Notice LSN-0097-1 ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1240eb93f0616b21c675416516ff3d74798fdc97","name":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1240eb93f0616b21c675416516ff3d74798fdc97","refsource":"MISC","tags":[],"title":"kernel/git/stable/linux.git - Linux kernel stable tree","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","name":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","refsource":"","tags":["Third Party Advisory","VDB Entry"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.debian.org/security/2023/dsa-5461","name":"https://www.debian.org/security/2023/dsa-5461","refsource":"MISC","tags":[],"title":"Debian -- Security Information -- DSA-5461-1 linux","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html","name":"https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html","refsource":"MISC","tags":[],"title":"[SECURITY] [DLA 3512-1] linux-5.10 security update","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.debian.org/security/2023/dsa-5448","name":"https://www.debian.org/security/2023/dsa-5448","refsource":"MISC","tags":[],"title":"Debian -- Security Information -- DSA-5448-1 linux","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://security.netapp.com/advisory/ntap-20230818-0004/","name":"https://security.netapp.com/advisory/ntap-20230818-0004/","refsource":"MISC","tags":[],"title":"CVE-2023-3390 Linux Kernel Vulnerability in NetApp Products | NetApp Product Security","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3390","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3390","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2023","cve_id":"3390","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"3390","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"netapp","cpe5":"h300s","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"3390","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"netapp","cpe5":"h410c","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"3390","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"netapp","cpe5":"h410s","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"3390","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"netapp","cpe5":"h500s","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2023","cve_id":"3390","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"netapp","cpe5":"h700s","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[{"cve":"CVE-2023-3390","qid":"160912","title":"Oracle Enterprise Linux Security Update for kernel (ELSA-2023-5069)"},{"cve":"CVE-2023-3390","qid":"160948","title":"Oracle Enterprise Linux Security Update for kernel (ELSA-2023-12839)"},{"cve":"CVE-2023-3390","qid":"199604","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6246-1)"},{"cve":"CVE-2023-3390","qid":"199608","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6250-1)"},{"cve":"CVE-2023-3390","qid":"199612","title":"Ubuntu Security Notification for Linux kernel (Intel IoTG) Vulnerabilities (USN-6255-1)"},{"cve":"CVE-2023-3390","qid":"199613","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6251-1)"},{"cve":"CVE-2023-3390","qid":"199615","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6252-1)"},{"cve":"CVE-2023-3390","qid":"199617","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6254-1)"},{"cve":"CVE-2023-3390","qid":"199618","title":"Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6260-1)"},{"cve":"CVE-2023-3390","qid":"199623","title":"Ubuntu Security Notification for Linux kernel (IoT) Vulnerabilities (USN-6261-1)"},{"cve":"CVE-2023-3390","qid":"199651","title":"Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6285-1)"},{"cve":"CVE-2023-3390","qid":"199764","title":"Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6385-1)"},{"cve":"CVE-2023-3390","qid":"242062","title":"Red Hat Update for kpatch-patch (RHSA-2023:5221)"},{"cve":"CVE-2023-3390","qid":"242068","title":"Red Hat Update for kernel (RHSA-2023:5238)"},{"cve":"CVE-2023-3390","qid":"242070","title":"Red Hat Update for kernel security (RHSA-2023:5244)"},{"cve":"CVE-2023-3390","qid":"242073","title":"Red Hat Update for kpatch-patch (RHSA-2023:5235)"},{"cve":"CVE-2023-3390","qid":"242075","title":"Red Hat Update for kernel-rt (RHSA-2023:5255)"},{"cve":"CVE-2023-3390","qid":"243050","title":"Red Hat Update for kernel (RHSA-2024:1250)"},{"cve":"CVE-2023-3390","qid":"243053","title":"Red Hat Update for kernel live patch module (RHSA-2024:1253)"},{"cve":"CVE-2023-3390","qid":"243055","title":"Red Hat Update for kernel (RHSA-2024:1268)"},{"cve":"CVE-2023-3390","qid":"243057","title":"Red Hat Update for kpatch-patch (RHSA-2024:1278)"},{"cve":"CVE-2023-3390","qid":"243058","title":"Red Hat Update for kernel-rt (RHSA-2024:1269)"},{"cve":"CVE-2023-3390","qid":"243062","title":"Red Hat Update for kernel-rt (RHSA-2024:1306)"},{"cve":"CVE-2023-3390","qid":"355591","title":"Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.15-2023-024"},{"cve":"CVE-2023-3390","qid":"355632","title":"Amazon Linux Security Advisory for kernel : ALAS2023-2023-251"},{"cve":"CVE-2023-3390","qid":"356157","title":"Amazon Linux Security Advisory for kernel : ALAS-2023-1827"},{"cve":"CVE-2023-3390","qid":"6000008","title":"Debian Security Update for linux (DSA 5461-1)"},{"cve":"CVE-2023-3390","qid":"6000130","title":"Debian Security Update for linux-5.10 (DLA 3512-1)"},{"cve":"CVE-2023-3390","qid":"6000207","title":"Debian Security Update for linux (DSA 5448-1)"},{"cve":"CVE-2023-3390","qid":"6000429","title":"Debian Security Update for linux (DLA 3710-1)"},{"cve":"CVE-2023-3390","qid":"6140184","title":"AWS Bottlerocket Security Update for kernel (GHSA-6p9w-cr65-j5c5)"},{"cve":"CVE-2023-3390","qid":"673354","title":"EulerOS Security Update for kernel (EulerOS-SA-2023-2843)"},{"cve":"CVE-2023-3390","qid":"673372","title":"EulerOS Security Update for kernel (EulerOS-SA-2023-2787)"},{"cve":"CVE-2023-3390","qid":"673449","title":"EulerOS Security Update for kernel (EulerOS-SA-2023-2898)"},{"cve":"CVE-2023-3390","qid":"673496","title":"EulerOS Security Update for kernel (EulerOS-SA-2023-2860)"},{"cve":"CVE-2023-3390","qid":"673498","title":"EulerOS Security Update for kernel (EulerOS-SA-2023-3132)"},{"cve":"CVE-2023-3390","qid":"673604","title":"EulerOS Security Update for kernel (EulerOS-SA-2023-2811)"},{"cve":"CVE-2023-3390","qid":"673970","title":"EulerOS Security Update for kernel (EulerOS-SA-2023-2879)"},{"cve":"CVE-2023-3390","qid":"755135","title":"SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP4) (SUSE-SU-2023:4166-1)"},{"cve":"CVE-2023-3390","qid":"755140","title":"SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP5) (SUSE-SU-2023:4175-1)"},{"cve":"CVE-2023-3390","qid":"755154","title":"SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP4) (SUSE-SU-2023:4201-1)"},{"cve":"CVE-2023-3390","qid":"755168","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 33 for SLE 15 SP3) (SUSE-SU-2023:4219-1)"},{"cve":"CVE-2023-3390","qid":"755180","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 33 for SLE 15 SP2) (SUSE-SU-2023:4245-1)"},{"cve":"CVE-2023-3390","qid":"755184","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 29 for SLE 15 SP3) (SUSE-SU-2023:4239-1)"},{"cve":"CVE-2023-3390","qid":"755186","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 4 for SLE 15 SP4) (SUSE-SU-2023:4267-1)"},{"cve":"CVE-2023-3390","qid":"755192","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 7 for SLE 15 SP4) (SUSE-SU-2023:4285-1)"},{"cve":"CVE-2023-3390","qid":"755194","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 34 for SLE 15 SP2) (SUSE-SU-2023:4279-1)"},{"cve":"CVE-2023-3390","qid":"755210","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 8 for SLE 15 SP4) (SUSE-SU-2023:4308-1)"},{"cve":"CVE-2023-3390","qid":"755212","title":"SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 0 for SLE 15 SP5) (SUSE-SU-2023:4326-1)"},{"cve":"CVE-2023-3390","qid":"907181","title":"Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (27346-1)"},{"cve":"CVE-2023-3390","qid":"941249","title":"AlmaLinux Security Update for kernel (ALSA-2023:5069)"},{"cve":"CVE-2023-3390","qid":"941254","title":"AlmaLinux Security Update for kernel-rt (ALSA-2023:5091)"},{"cve":"CVE-2023-3390","qid":"941276","title":"AlmaLinux Security Update for kernel (ALSA-2023:5244)"},{"cve":"CVE-2023-3390","qid":"961015","title":"Rocky Linux Security Update for kernel-rt (RLSA-2023:5091)"},{"cve":"CVE-2023-3390","qid":"961022","title":"Rocky Linux Security Update for kernel (RLSA-2023:5244)"}]},"source_records":{"cve_program":{"data_version":"4.0","data_type":"CVE","data_format":"MITRE","CVE_data_meta":{"ID":"CVE-2023-3390","ASSIGNER":"security@google.com","STATE":"PUBLIC"},"description":{"description_data":[{"lang":"eng","value":"A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c.\n\nMishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue.\n\nWe recommend upgrading past commit 1240eb93f0616b21c675416516ff3d74798fdc97."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-416 Use After Free","cweId":"CWE-416"}]}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"Linux","product":{"product_data":[{"product_name":"Linux Kernel","version":{"version_data":[{"version_affected":"<","version_name":"3.16","version_value":"6.4"}]}}]}}]}},"references":{"reference_data":[{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1240eb93f0616b21c675416516ff3d74798fdc97","refsource":"MISC","name":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1240eb93f0616b21c675416516ff3d74798fdc97"},{"url":"https://kernel.dance/1240eb93f0616b21c675416516ff3d74798fdc97","refsource":"MISC","name":"https://kernel.dance/1240eb93f0616b21c675416516ff3d74798fdc97"},{"url":"https://www.debian.org/security/2023/dsa-5448","refsource":"MISC","name":"https://www.debian.org/security/2023/dsa-5448"},{"url":"https://www.debian.org/security/2023/dsa-5461","refsource":"MISC","name":"https://www.debian.org/security/2023/dsa-5461"},{"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html","refsource":"MISC","name":"https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html"},{"url":"https://security.netapp.com/advisory/ntap-20230818-0004/","refsource":"MISC","name":"https://security.netapp.com/advisory/ntap-20230818-0004/"},{"url":"http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html","refsource":"MISC","name":"http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html"}]},"generator":{"engine":"Vulnogram 0.1.0-dev"},"source":{"discovery":"EXTERNAL"},"impact":{"cvss":[{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}]}},"nvd":{"publishedDate":"2023-06-28 21:15:00","lastModifiedDate":"2024-03-27 14:11:00","problem_types":["CWE-416"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2","versionEndExcluding":"6.3.9","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"5.10.188","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.20","versionEndExcluding":"5.4.251","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"4.19.291","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16","versionEndExcluding":"6.1.35","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.11","versionEndExcluding":"5.15.118","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.16","versionEndExcluding":"4.14.322","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}