CVE-2023-4015: debian debian_linux Use After Free
Vulnerability summary
CVE-2023-4015 is a high (CVSS 7.8) Use After Free vulnerability in debian debian_linux. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 20.4% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 12 · Related 8Timeline
- 06-09-2023PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nft_immediate_deactivate() can lead unbinding the chain and objects be deactivated but later used. We recommend upgrading past commit 0a771f7b266b02d262900c75f1e175c7fe76fec2.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.29%
Chance of exploitation in the next 30 days
Percentile
20%
Versus all other CVEs
30-day change
+0.01 pp
From 0.28% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu89 products
- linux< 5.15.0-82.91
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1043.48
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.52-1 | < 6.4.11-1
- debian_linux12.0
Linux2 products
- kernel≥ 6.4, < 6.5
- linux_kernel≥ 5.9, < 5.10.190 | ≥ 5.11, < 5.15.124 | ≥ 5.16, < 6.1.43 | ≥ 6.2, < 6.4.8
3 vendors · 93 products
References
21 links
www.debian.org/security/2023/dsa-5492Third Party Advisory
