CVE-2023-4004 Information

Description

A use-after-free flaw was found in the Linux kernel’s netfilter in the way a user triggers the nft_pipapo_remove function with the element without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.

Reference

https://bugzilla.redhat.com/show_bug.cgi?id=2225275 https://access.redhat.com/security/cve/CVE-2023-4004 https://patchwork.ozlabs.org/project/netfilter-devel/patch/20230719190824.21196-1-fw@strlen.de/