CVE-2023-3777: Use-after-free in Linux kernel's netfilter: nf_tables component
Vulnerability summary
CVE-2023-3777 is a high (CVSS 7.8) Use After Free vulnerability in canonical ubuntu_linux. EPSS estimates a 0.41% chance of exploitation in the next 30 days, higher than 35% of scored vulnerabilities.
Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 42 · Related 34Timeline
- 06-09-2023PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. When nf_tables_delrule() is flushing table rules, it is not checked whether the chain is bound and the chain's owner rule can also release the objects in certain circumstances. We recommend upgrading past commit 6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.41%
Chance of exploitation in the next 30 days
Percentile
35%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.41% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu90 products
- linux< 5.15.0-82.91
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1043.48
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.52-1 | < 6.4.11-1
- debian_linux12.0
Linux2 products
- kernel≥ 5.9, < 6.5
- linux_kernel≥ 5.9, < 5.10.188 | ≥ 5.11, < 5.15.123 | ≥ 5.16, < 6.1.42 | ≥ 6.2, < 6.4.7
Canonical1 product
- ubuntu_linuxEOL14.04 | 16.04 | 18.04 | 20.04 | 22.04
Suse1 product
- kernel-livepatch-SLE15-SP5-RT_Update_7&distro=SUSE Linux Enterprise Live Patching 15 SP5< 2-150500.2.1
5 vendors · 96 products
References
24 links
www.debian.org/security/2023/dsa-5492Third Party Advisory- packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.htmlThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.htmlThird Party AdvisoryVDB Entry