CVE-2023-42753

Aliases:RHSA-2024:0346RHSA-2024:0347RHSA-2024:0371UBUNTU-CVE-2023-42753DEBIAN-CVE-2023-42753
Advisory lineage Upstream: 0 Downstream: 87
Modified
Published: 25 Sept 2023, 20:25
Last modified:06 Aug 2026, 19:18

Vulnerability Summary

Overall Risk (default)
medium
41/100
CVSS Score
7.8 HIGH
v3.1 (nvd)
EPSS Score
0.51% LOW
1% probability +0.50%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

25 Sept 2023, 20:25
Published
Vulnerability first disclosed
06 Aug 2026, 19:18
Last Modified
Vulnerability information updated

Description

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

CVSS Metrics

  • v3.1•HIGH•Score: 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 0.51%• Percentile: 42%

Techniques & Countermeasures

  • CWE-787•Out-of-bounds Write

    The product writes data past the end, or before the beginning, of the intended buffer.

Affected Systems

  • debian•linux

    < 5.10.197-1 | < 6.1.55-1 | < 6.5.3-1 | < 6.5.3-1

  • ubuntu•linux

    < 4.4.0-246.280 | < 4.15.0-219.230 | < 5.4.0-165.182 | < 5.15.0-87.97

  • ubuntu•linux-allwinner-5.19

    all

  • ubuntu•linux-aws

    < 4.4.0-1124.130 | < 4.4.0-1162.177 | < 4.15.0-1162.175 | < 5.4.0-1112.121 | < 5.15.0-1048.53

  • ubuntu•linux-aws-5.0

    all

  • ubuntu•linux-aws-5.11

    all

  • ubuntu•linux-aws-5.13

    all

  • ubuntu•linux-aws-5.15

    < 5.15.0-1048.53~20.04.1

  • ubuntu•linux-aws-5.19

    all

  • ubuntu•linux-aws-5.3

    all

  • ubuntu•linux-aws-5.4

    < 5.4.0-1112.121~18.04.2

  • ubuntu•linux-aws-5.8

    all

  • ubuntu•linux-aws-6.2

    < 6.2.0-1014.14~22.04.1

  • ubuntu•linux-aws-fips

    < 4.15.0-2101.107 | < 5.4.0-1112.121+fips1 | all

  • ubuntu•linux-aws-hwe

    < 4.15.0-1162.175~16.04.1

  • ubuntu•linux-azure

    < 4.15.0-1171.186~14.04.1 | < 4.15.0-1171.186~16.04.1 | all | < 5.4.0-1118.125 | < 5.15.0-1050.57

  • ubuntu•linux-azure-4.15

    < 4.15.0-1171.186

  • ubuntu•linux-azure-5.11

    all

  • ubuntu•linux-azure-5.13

    all

  • ubuntu•linux-azure-5.15

    < 5.15.0-1050.57~20.04.1

  • ubuntu•linux-azure-5.19

    all

  • ubuntu•linux-azure-5.3

    all

  • ubuntu•linux-azure-5.4

    < 5.4.0-1118.125~18.04.1

  • ubuntu•linux-azure-5.8

    all

  • ubuntu•linux-azure-6.2

    < 6.2.0-1015.15~22.04.1

  • ubuntu•linux-azure-edge

    all

  • ubuntu•linux-azure-fde

    all | < 5.15.0-1050.57.1

  • ubuntu•linux-azure-fde-5.19

    all

  • ubuntu•linux-azure-fde-6.2

    < 6.2.0-1015.15~22.04.1.1

  • ubuntu•linux-azure-fips

    < 4.15.0-2080.86 | < 5.4.0-1118.125+fips1 | all

  • ubuntu•linux-bluefield

    all | < 5.4.0-1073.79 | < 5.15.0-1028.30

  • ubuntu•linux-fips

    < 4.4.0-1094.101 | all | < 4.15.0-1117.128 | < 5.4.0-1087.96

  • ubuntu•linux-gcp

    < 4.15.0-1156.173~16.04.1 | all | < 5.4.0-1116.125 | < 5.15.0-1045.53

  • ubuntu•linux-gcp-4.15

    < 4.15.0-1156.173

  • ubuntu•linux-gcp-5.11

    all

  • ubuntu•linux-gcp-5.13

    all

  • ubuntu•linux-gcp-5.15

    < 5.15.0-1045.53~20.04.2

  • ubuntu•linux-gcp-5.19

    all

  • ubuntu•linux-gcp-5.3

    all

  • ubuntu•linux-gcp-5.4

    < 5.4.0-1116.125~18.04.1

  • ubuntu•linux-gcp-5.8

    all

  • ubuntu•linux-gcp-6.2

    < 6.2.0-1017.19~22.04.1

  • ubuntu•linux-gcp-fips

    < 4.15.0-2064.69 | < 5.4.0-1116.125+fips1 | all

  • ubuntu•linux-gke

    all | < 5.15.0-1045.50

  • ubuntu•linux-gke-4.15

    all

  • ubuntu•linux-gke-5.15

    all

  • ubuntu•linux-gke-5.4

    all

  • ubuntu•linux-gkeop

    < 5.4.0-1079.83 | < 5.15.0-1031.37

  • ubuntu•linux-gkeop-5.15

    < 5.15.0-1031.37~20.04.1

  • ubuntu•linux-gkeop-5.4

    all

Showing first 50 affected entries in server-rendered view.

References (59)