CVE-2023-39189

Updated: 2024-01-11 20:06:00.904108

Description:

A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0
CVSS Version 3.x MEDIUM 6

Status

OS name Project name Version Score Severity Status Errata Last updated
AlmaLinux 9.2 ESU kernel 5.14.0 6 MEDIUM Ignored 2023-11-08 04:07:09
AlmaLinux 9.2 FIPS kernel 5.14.0 6 MEDIUM Ignored 2023-11-21 04:11:42
CentOS 6 ELS kernel 2.6.32 6 MEDIUM Ignored 2023-10-13 05:07:50
CentOS 7 ELS kernel 3.10.0 6 MEDIUM Ignored 2023-10-13 05:07:50
CentOS 8.4 ELS kernel 4.18.0 6 MEDIUM Ignored 2023-10-13 05:07:49
CentOS 8.5 ELS kernel 4.18.0 6 MEDIUM Ignored 2023-10-13 05:07:49
CloudLinux 6 ELS kernel 2.6.32 6 MEDIUM Ignored 2023-10-13 05:07:51
Oracle Linux 6 ELS kernel 2.6.32 6 MEDIUM Ignored 2023-10-13 05:07:50
Ubuntu 16.04 ELS linux-hwe 4.15.0 6 MEDIUM Released CLSA-2023:1701279154 2023-11-29 13:13:37
Ubuntu 16.04 ELS linux 4.4.0 6 MEDIUM Released CLSA-2023:1701799960 2023-12-05 16:13:43
Total: 11