CVE-2023-39189: Kernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()
A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnlosfaddcallback function did not validate the user mode controlled optnum field. This flaw allows a local privileged (CAPNETADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.
Other sources
An out-of-bounds read issue was found in the Linux kernel in the nfosfmatchone() function, which is used for nftables OS fingerprinting. This flaw requires CAPNETADMIN to be exploited and could lead to information disclosure.
— Red Hat
Linux Kernel could allow a local authenticated attacker to obtain sensitive information, caused by an out-of-bounds read flaw in the nfnlosfaddcallback function in the Netfilter subsystem. By sending a specially crafted request, an attacker could exploit this vulnerability to obtain sensitive information or cause a denial of service condition.
— IBM
Affected Software
Remediation
Patch Available
Mitigation
Event History
Frequently Asked Questions
What is CVE-2023-39189?
CVE-2023-39189 is a vulnerability found in the Netfilter subsystem in the Linux kernel that allows a local privileged attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.
How severe is CVE-2023-39189?
CVE-2023-39189 has a severity rating of medium with a value of 6.
Which software is affected by CVE-2023-39189?
The Linux kernel versions up to 6.6, Redhat Enterprise Linux versions 8.0 and 9.0, and Fedora version 38 are affected by CVE-2023-39189.
How can I fix CVE-2023-39189?
To fix CVE-2023-39189, it is recommended to update the affected software to a version that includes the patch for this vulnerability.
Where can I find more information about CVE-2023-39189?
You can find more information about CVE-2023-39189 on the Redhat Security Advisory page and the Bugzilla entry.