CVE-2023-35001High· 7.8▾ MidnightPoC availableLinux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 42.9 · likelihood 0.3 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Oct 15.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.5%
1.5% → 1.5%
3 GitHub repos (last check)
Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
linux_kernel >= 3.13, < 4.14.322linux_kernel >= 4.15, <= 4.19.291linux_kernel >= 4.20, < 5.4.251linux_kernel >= 5.5, < 5.10.188linux_kernel >= 5.11, < 5.15.121linux_kernel >= 5.16, < 6.1.39linux_kernel >= 6.2, < 6.4.4debian_linux = 11.0fedora = 37fedora = 38h300sh410ch410sh500sh700sUpgrade past the affected range:
linux_kernel 6.4.4Connected by shared product, vendor, weakness, or advisory.
CVE-2022-1015Medium· 6.6A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem
CVE-2022-3028High· 7.0A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously
CVE-2021-44879Medium· 5.5In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference.
CVE-2022-34918High· 7.8An issue was discovered in the Linux kernel through 5.18.9
CVE-2022-36280Medium· 6.3An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'
CVE-2022-3586Medium· 5.5A flaw was found in the Linux kernel’s networking code