cve/2023/CVE-2023-31248.md

CVE-2023-31248

Description

Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; nft_chain_lookup_byid() failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace

POC

Reference

• http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html
• http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html

Github

• https://github.com/20142995/sectool
• https://github.com/Threekiii/CVE
• https://github.com/star-sg/CVE