CVE-2023-6817: Fixes in Linux Kernel
A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation.
The function nftpipapowalk did not skip inactive elements during set walk which could lead double deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-after-free.
We recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a.
Other sources
Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by a use-after-free flaw in the nftpipapowalk function in the netfilter: nftables component. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges.
— IBM
Affected Software
Remediation
Mitigation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2023-6817?
CVE-2023-6817 has a high severity level due to its potential for local privilege escalation.
How do I fix CVE-2023-6817?
To fix CVE-2023-6817, update to the recommended Linux kernel versions or later as specified in the vulnerability details.
Which systems are affected by CVE-2023-6817?
CVE-2023-6817 affects multiple versions of the Linux kernel and specific IBM Security Verify Governance products.
What exploitation method is associated with CVE-2023-6817?
CVE-2023-6817 can be exploited via a use-after-free condition in the nf_tables component of the Linux kernel.
What are the consequences of CVE-2023-6817 if exploited?
Exploitation of CVE-2023-6817 can lead to local privilege escalation, allowing unauthorized users to gain elevated access to the system.