{"id":"CVE-2023-4147","title":"Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free","summary":"A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-416"],"vendor":"Red Hat","product":"kernel","affected":["kernel (all versions)","kernel-rt (all versions)","kernel (all versions)","kpatch-patch","kernel (all versions)","kernel-rt (all versions)","kpatch-patch","kernel","kernel","kernel-rt","kernel","kernel-rt"],"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2025-01-09T15:55:27.469292Z"},"exploitAvailable":true,"published":"2023-08-07","updated":"2026-11-07","sourceUpdated":"2026-11-07T13:41:48.677Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-4147","references":[{"url":"https://access.redhat.com/errata/RHSA-2023:5069","label":"RHSA-2023:5069"},{"url":"https://access.redhat.com/errata/RHSA-2023:5091","label":"RHSA-2023:5091"},{"url":"https://access.redhat.com/errata/RHSA-2023:5093","label":"RHSA-2023:5093"},{"url":"https://access.redhat.com/errata/RHSA-2023:7382","label":"RHSA-2023:7382"},{"url":"https://access.redhat.com/errata/RHSA-2023:7389","label":"RHSA-2023:7389"},{"url":"https://access.redhat.com/errata/RHSA-2023:7411","label":"RHSA-2023:7411"},{"url":"https://access.redhat.com/security/cve/CVE-2023-4147"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2225239","label":"RHBZ#2225239"},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0ebc1064e4874d5987722a2ddbc18f94aa53b211"},{"url":"https://www.spinics.net/lists/stable/msg671573.html"}],"tags":["cve.org","exploit-available"],"epss":0.00553,"epssPercentile":0.46406,"exploits":{"github":1,"githubRepos":["https://github.com/murdok1982/Exploit-en-Python-para-CVE-2023-4147"],"checkedAt":"2026-11-07T17:43:13.363Z"},"ingestedAt":"2026-11-07T14:18:21.469Z","slug":"CVE-2023-4147","body":"## Overview\n\nA use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.\n\n## Affected\n\n- `kernel (all versions)`\n- `kernel-rt (all versions)`\n- `kernel (all versions)`\n- `kpatch-patch`\n- `kernel (all versions)`\n- `kernel-rt (all versions)`\n- `kpatch-patch`\n- `kernel`\n- `kernel`\n- `kernel-rt`\n- `kernel`\n- `kernel-rt`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":55,"depthScoreParts":{"impact":42.9,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[]}