cve/2023/CVE-2023-42753.md

CVE-2023-42753

Description

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h->nets array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

POC

Reference

• http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html
• https://seclists.org/oss-sec/2023/q3/216
• https://www.openwall.com/lists/oss-security/2023/09/22/10

Github

• https://github.com/EGI-Federation/SVG-advisories