CVE-2023-32233

CVE Enrichment

CVSS: 7.8 HIGH
EPSS: 12.97%
EPSS Percentile: 96.24%
CISA KEV: Not listed

Description

In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: cve@mitre.org
Published: 09-May-2023 03:15
Last Modified: 17-Jun-2026 12:58
EPSS Date: 2026-10-11
CWE: CWE-416

CVSS Vector


            CVSS:3.1                            AV:L /
                            AC:L /
                            PR:L /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

Affected Products / Versions

linux / linux_kernel
Version / affected range: * · from (inclusive) 3.13 · before (exclusive) 4.14.315
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux / linux_kernel
Version / affected range: * · from (inclusive) 4.15 · before (exclusive) 4.19.283
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux / linux_kernel
Version / affected range: * · from (inclusive) 4.20 · before (exclusive) 5.4.243
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux / linux_kernel
Version / affected range: * · from (inclusive) 5.5 · before (exclusive) 5.10.180
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux / linux_kernel
Version / affected range: * · from (inclusive) 5.11 · before (exclusive) 5.15.111
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux / linux_kernel
Version / affected range: * · from (inclusive) 5.16 · before (exclusive) 6.1.28
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux / linux_kernel
Version / affected range: * · from (inclusive) 6.2 · before (exclusive) 6.2.15
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux / linux_kernel
Version / affected range: * · from (inclusive) 6.3 · before (exclusive) 6.3.2
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
redhat / enterprise_linux
Version / affected range: 7.0
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
redhat / enterprise_linux
Version / affected range: 8.0
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
redhat / enterprise_linux
Version / affected range: 9.0
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
netapp / hci_baseboard_management_controller
Version / affected range: h300s
cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:*
netapp / hci_baseboard_management_controller
Version / affected range: h410c
cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:*
netapp / hci_baseboard_management_controller
Version / affected range: h410s
cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:*
netapp / hci_baseboard_management_controller
Version / affected range: h500s
cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:*
netapp / hci_baseboard_management_controller
Version / affected range: h700s
cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:*

References

Last enrichment sync: 12-Oct-2026 01:33
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

CVE-2023-32233: another Netfilter subsystem vulnerability that allows for Use-After-Free conditions and privilege escalation through improper processing of network requests Kaspersky Reports Rising Vulnerability Disclosures and Early Exploit Releases in Q2 2026

CVE (26)

People (2)

Vendors (2)

Products (15)

Tools (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.