CVE-2023-4569

Advisory lineage Upstream: 0 Downstream: 22
Modified
Published: 28 Aug 2023, 21:46
Last modified:27 Feb 2025, 21:03

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (cve.org)
EPSS Score
0.01% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

28 Aug 2023, 21:46
Published
Vulnerability first disclosed
27 Feb 2025, 21:03
Last Modified
Vulnerability information updated

Description

A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a memory leak.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.01%• Percentile: 2%

Techniques & Countermeasures

  • CWE-401•Missing Release of Memory after Effective Lifetime

    The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

  • CWE-402•Transmission of Private Resources into a New Sphere ('Resource Leak')

    The product makes resources available to untrusted parties when those resources are only intended to be accessed by the product.

Affected Systems

  • debian•debian_linux

    12.0

  • linux•linux_kernel

    < 6.5 | 6.5:rc1 | 6.5:rc2 | 6.5:rc3 | 6.5:rc4 | 6.5:rc5 | 6.5:rc6

  • redhat•enterprise_linux

    8.0 | 9.0

References (4)