---
id: CVE-2023-4147
title: >-
  Kernel: netfilter: nf_tables_newrule when adding a rule with
  nfta_rule_chain_id leads to use-after-free
summary: >-
  A use-after-free flaw was found in the Linux kernel’s Netfilter functionality
  when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to
  crash or escalate their privileges on the system.
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-416
vendor: Red Hat
product: kernel
affected:
  - kernel (all versions)
  - kernel-rt (all versions)
  - kernel (all versions)
  - kpatch-patch
  - kernel (all versions)
  - kernel-rt (all versions)
  - kpatch-patch
  - kernel
  - kernel
  - kernel-rt
  - kernel
  - kernel-rt
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: total
  timestamp: '2025-01-09T15:55:27.469292Z'
exploitAvailable: true
published: '2023-08-07'
updated: '2026-11-07'
sourceUpdated: '2026-11-07T13:41:48.677Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2023-4147'
references:
  - url: 'https://access.redhat.com/errata/RHSA-2023:5069'
    label: 'RHSA-2023:5069'
  - url: 'https://access.redhat.com/errata/RHSA-2023:5091'
    label: 'RHSA-2023:5091'
  - url: 'https://access.redhat.com/errata/RHSA-2023:5093'
    label: 'RHSA-2023:5093'
  - url: 'https://access.redhat.com/errata/RHSA-2023:7382'
    label: 'RHSA-2023:7382'
  - url: 'https://access.redhat.com/errata/RHSA-2023:7389'
    label: 'RHSA-2023:7389'
  - url: 'https://access.redhat.com/errata/RHSA-2023:7411'
    label: 'RHSA-2023:7411'
  - url: 'https://access.redhat.com/security/cve/CVE-2023-4147'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2225239'
    label: RHBZ#2225239
  - url: >-
      https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0ebc1064e4874d5987722a2ddbc18f94aa53b211
  - url: 'https://www.spinics.net/lists/stable/msg671573.html'
tags:
  - cve.org
  - exploit-available
epss: 0.00553
epssPercentile: 0.46406
exploits:
  github: 1
  githubRepos:
    - 'https://github.com/murdok1982/Exploit-en-Python-para-CVE-2023-4147'
  checkedAt: '2026-11-07T17:43:13.363Z'
ingestedAt: '2026-11-07T14:18:21.469Z'
---

## Overview

A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.

## Affected

- `kernel (all versions)`
- `kernel-rt (all versions)`
- `kernel (all versions)`
- `kpatch-patch`
- `kernel (all versions)`
- `kernel-rt (all versions)`
- `kpatch-patch`
- `kernel`
- `kernel`
- `kernel-rt`
- `kernel`
- `kernel-rt`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.