CVE-2023-6040: An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family)

Q: What is the severity of CVE-2023-6040?

CVE-2023-6040 is classified as a high-severity vulnerability due to the potential for out-of-bounds access leading to denial of service or other impacts.

Q: How do I fix CVE-2023-6040?

To fix CVE-2023-6040, update the kernel to version 5.18 or later, or apply the appropriate patches provided by your distribution.

Q: Which versions of Linux Kernel are affected by CVE-2023-6040?

CVE-2023-6040 affects Linux Kernel versions between 4.16 and 5.18, including specific versions of Debian and Red Hat kernels.

Q: Can CVE-2023-6040 cause data loss?

While CVE-2023-6040 primarily poses a risk of denial of service, it could potentially lead to data corruption in certain exploitation scenarios.

Q: Is there a workaround for CVE-2023-6040?

There are no recommended workarounds for CVE-2023-6040 other than upgrading to the fixed versions of the kernel.

Published Jan 12, 2024

Updated

An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nftables: Reject tables of unsupported family)

Affected Software

15 affected componentsFixes available

Linux Linux kernel>=4.16<4.19.305

Linux Linux kernel>=4.20<5.4.267

Linux Linux kernel>=5.5<5.10.208

Linux Linux kernel>=5.11<5.15.147

Linux Linux kernel>=5.16<5.18

Debian Debian Linux=10.0

IBM Security Verify Governance<=ISVG 10.0.2

IBM Security Verify Governance, Identity Manager Software Stack<=ISVG 10.0.2

IBM Security Verify Governance, Identity Manager Virtual Appliance<=ISVG 10.0.2

IBM Security Verify Governance Identity Manager Container<=ISVG 10.0.2

debian/linux

5.10.223-15.10.234-16.1.129-16.1.135-16.12.22-16.12.25-1

redhat/kernel<5.18

5.18

Microsoft cbl2 kernel 5.15.164.1-1

Patch available

Microsoft cbl2 kernel 5.15.153.1-1

Patch available

Microsoft cbl2 kernel 5.15.164.1-1

Patch available

Remediation

Patch Available

http://www.openwall.com/lists/oss-security/2024/01/12/1

Mitigation

If not needed, disable the ability for unprivileged users to create namespaces. To do this temporarily, do: sudo sysctl -w kernel.unprivileged_userns_clone=0 To disable across reboots, do: echo kernel.unprivileged_userns_clone=0 | \ sudo tee /etc/sysctl.d/99-disable-unpriv-userns.conf

Event History

Jan 12, 2024

CVE Published

via MITRE·01:37 AM

Data Sourced

via MITRE·01:37 AM

DescriptionSeverityWeakness

Data Sourced

via Red Hat·06:15 AM

DescriptionSeverityAffected Software

Jan 23, 2024

Data Sourced

via Microsoft·08:00 AM

DescriptionSeverityWeakness

Data Sourced

via Microsoft·08:00 AM

Affected Software

Updated

via Microsoft·08:00 AM

Affected Software

Updated

via Microsoft·08:00 AM

SeverityAffected Software

Updated

via Microsoft·08:00 AM

DescriptionSeverity

Feb 14, 2024

Data Sourced

via Launchpad·10:43 PM

Description

Apr 26, 2025

Data Sourced

via Ubuntu·11:50 PM

RemedyDescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7230443

Frequently Asked Questions

What is the severity of CVE-2023-6040?

CVE-2023-6040 is classified as a high-severity vulnerability due to the potential for out-of-bounds access leading to denial of service or other impacts.

How do I fix CVE-2023-6040?

To fix CVE-2023-6040, update the kernel to version 5.18 or later, or apply the appropriate patches provided by your distribution.

Which versions of Linux Kernel are affected by CVE-2023-6040?

CVE-2023-6040 affects Linux Kernel versions between 4.16 and 5.18, including specific versions of Debian and Red Hat kernels.

Can CVE-2023-6040 cause data loss?

While CVE-2023-6040 primarily poses a risk of denial of service, it could potentially lead to data corruption in certain exploitation scenarios.

Is there a workaround for CVE-2023-6040?

There are no recommended workarounds for CVE-2023-6040 other than upgrading to the fixed versions of the kernel.

CVE-2023-6040: An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family)

Affected Software

Remediation

Patch Available

Mitigation

Event History

Parent advisories

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2023-6040?

How do I fix CVE-2023-6040?

Which versions of Linux Kernel are affected by CVE-2023-6040?

Can CVE-2023-6040 cause data loss?

Is there a workaround for CVE-2023-6040?

Company

Resources

Contact