CVE-2023-42753— Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
Quick assessment
Affected
Red Hat Red Hat Enterprise Linux 7
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 6.6 版本存在缓冲区错误漏洞，该漏洞源于netfilter 子系统中发现了一个数组索引， 丢失的宏可能会导致h->nets数组偏移量计算错误，从而为攻击者提供了任意增加或减少内存缓冲区越界的原语，导致系统崩溃或权限提升。
Possible ATT&CK Techniques 1 AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 33
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 6 | any |
unaffected |
| Red Hat | Red Hat Enterprise Linux 7 | 0:3.10.0-1160.108.1.rt56.1259.el7< * |
unaffected |
0:3.10.0-1160.108.1.el7< * |
unaffected | ||
any |
unaffected | ||
| Red Hat | Red Hat Enterprise Linux 7.7 Advanced Update Support | 0:3.10.0-1062.85.1.el7< * |
unaffected |
| Red Hat | Red Hat Enterprise Linux 8 | 0:4.18.0-513.11.1.rt7.313.el8_9< * |
unaffected |
any |
unaffected | ||
0:4.18.0-513.11.1.el8_9< * |
unaffected | ||
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support | 0:4.18.0-193.120.1.el8_2< * |
unaffected |
| Red Hat | Red Hat Enterprise Linux 8.2 Telecommunications Update Service | 0:4.18.0-193.120.1.rt13.171.el8_2< * |
unaffected |
0:4.18.0-193.120.1.el8_2< * |
unaffected | ||
| Red Hat | Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions | any |
unaffected |
0:4.18.0-193.120.1.el8_2< * |
unaffected | ||
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | 0:4.18.0-305.120.1.el8_4< * |
unaffected |
| Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | 0:4.18.0-305.120.1.rt7.196.el8_4< * |
unaffected |
0:4.18.0-305.120.1.el8_4< * |
unaffected | ||
| Red Hat | Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | 0:4.18.0-305.120.1.el8_4< * |
unaffected |
any |
unaffected | ||
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | any |
unaffected |
0:4.18.0-372.87.1.el8_6< * |
unaffected | ||
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | 0:4.18.0-477.36.1.el8_8< * |
unaffected |
any |
unaffected | ||
| Red Hat | Red Hat Enterprise Linux 9 | 0:5.14.0-362.18.1.el9_3< * |
unaffected |
any |
unaffected | ||
0:5.14.0-362.18.1.el9_3< * |
unaffected | ||
any |
affected | ||
| Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | 0:5.14.0-70.80.1.el9_0< * |
unaffected |
0:5.14.0-70.80.1.rt21.151.el9_0< * |
unaffected | ||
any |
unaffected | ||
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | 0:5.14.0-284.40.1.el9_2< * |
unaffected |
0:5.14.0-284.40.1.rt14.325.el9_2< * |
unaffected | ||
any |
unaffected | ||
| Red Hat | Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 | 0:4.18.0-372.87.1.el8_6< * |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-42753
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
Source: CVE Program / CVE List V5
Vulnerability Description
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 6.6 版本存在缓冲区错误漏洞，该漏洞源于netfilter 子系统中发现了一个数组索引， 丢失的宏可能会导致h->nets数组偏移量计算错误，从而为攻击者提供了任意增加或减少内存缓冲区越界的原语，导致系统崩溃或权限提升。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 7 | 0:3.10.0-1160.108.1.rt56.1259.el7 ~ * |
cpe:/a:redhat:rhel_extras_rt:7
|
|
| Red Hat | Red Hat Enterprise Linux 7 | 0:3.10.0-1160.108.1.el7 ~ * |
cpe:/o:redhat:enterprise_linux:7::client
|
|
| Red Hat | Red Hat Enterprise Linux 7 | - |
cpe:/o:redhat:enterprise_linux:7::server
|
|
| Red Hat | Red Hat Enterprise Linux 7.7 Advanced Update Support | 0:3.10.0-1062.85.1.el7 ~ * |
cpe:/o:redhat:rhel_aus:7.7::server
|
|
| Red Hat | Red Hat Enterprise Linux 8 | 0:4.18.0-513.11.1.rt7.313.el8_9 ~ * |
cpe:/a:redhat:enterprise_linux:8::nfv
|
|
| Red Hat | Red Hat Enterprise Linux 8 | - |
cpe:/o:redhat:enterprise_linux:8::baseos
|
|
| Red Hat | Red Hat Enterprise Linux 8 | 0:4.18.0-513.11.1.el8_9 ~ * |
cpe:/a:redhat:enterprise_linux:8::crb
|
|
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support | 0:4.18.0-193.120.1.el8_2 ~ * |
cpe:/o:redhat:rhel_aus:8.2::baseos
|
|
| Red Hat | Red Hat Enterprise Linux 8.2 Telecommunications Update Service | 0:4.18.0-193.120.1.rt13.171.el8_2 ~ * |
cpe:/a:redhat:rhel_tus:8.2::nfv
|
|
| Red Hat | Red Hat Enterprise Linux 8.2 Telecommunications Update Service | 0:4.18.0-193.120.1.el8_2 ~ * |
cpe:/o:redhat:rhel_aus:8.2::baseos
|
|
| Red Hat | Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions | - |
cpe:/o:redhat:rhel_e4s:8.2::baseos
|
|
| Red Hat | Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions | 0:4.18.0-193.120.1.el8_2 ~ * |
cpe:/o:redhat:rhel_aus:8.2::baseos
|
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | 0:4.18.0-305.120.1.el8_4 ~ * |
cpe:/o:redhat:rhel_aus:8.4::baseos
|
|
| Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | 0:4.18.0-305.120.1.rt7.196.el8_4 ~ * |
cpe:/a:redhat:rhel_tus:8.4::nfv
|
|
| Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | 0:4.18.0-305.120.1.el8_4 ~ * |
cpe:/o:redhat:rhel_aus:8.4::baseos
|
|
| Red Hat | Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | 0:4.18.0-305.120.1.el8_4 ~ * |
cpe:/o:redhat:rhel_aus:8.4::baseos
|
|
| Red Hat | Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | - |
cpe:/o:redhat:rhel_e4s:8.4::baseos
|
|
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | - |
cpe:/o:redhat:rhel_eus:8.6::baseos
|
|
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | 0:4.18.0-372.87.1.el8_6 ~ * |
cpe:/a:redhat:rhel_eus:8.6::crb
|
|
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | 0:4.18.0-477.36.1.el8_8 ~ * |
cpe:/a:redhat:rhel_eus:8.8::crb
|
|
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | - |
cpe:/o:redhat:rhel_eus:8.8::baseos
|
|
| Red Hat | Red Hat Enterprise Linux 9 | 0:5.14.0-362.18.1.el9_3 ~ * |
cpe:/a:redhat:enterprise_linux:9::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 9 | - |
cpe:/o:redhat:enterprise_linux:9::baseos
|
|
| Red Hat | Red Hat Enterprise Linux 9 | 0:5.14.0-362.18.1.el9_3 ~ * |
cpe:/a:redhat:enterprise_linux:9::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | 0:5.14.0-70.80.1.el9_0 ~ * |
cpe:/a:redhat:rhel_eus:9.0::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | 0:5.14.0-70.80.1.rt21.151.el9_0 ~ * |
cpe:/a:redhat:rhel_eus:9.0::nfv
|
|
| Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | - |
cpe:/o:redhat:rhel_eus:9.0::baseos
|
|
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | 0:5.14.0-284.40.1.el9_2 ~ * |
cpe:/a:redhat:rhel_eus:9.2::appstream
|
|
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | 0:5.14.0-284.40.1.rt14.325.el9_2 ~ * |
cpe:/a:redhat:rhel_eus:9.2::nfv
|
|
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | - |
cpe:/o:redhat:rhel_eus:9.2::baseos
|
|
II. Public POCs for CVE-2023-42753
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-42753
请登录查看更多情报信息。
Vendor Advisories for CVE-2023-42753 (27)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
🔗 RHSA-2024:0376 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
-
-
-
-
-
-
-
-
-
-
-
-
Exploits & Public PoCs for CVE-2023-42753 (1)
Mailing List Discussions for CVE-2023-42753 (4)
Same Patch Batch · Red Hat · 2023-09-25 · 6 CVEs total
| CVE-2022-4137 | 8.1 HIGH | Keycloak: reflected xss attack |
| CVE-2022-4318 | 7.8 HIGH | Cri-o: /etc/passwd tampering privesc |
| CVE-2023-5156 | 7.5 HIGH | Glibc: dos due to memory leak in getaddrinfo.c |
| CVE-2022-4244 | 7.5 HIGH | Codehaus-plexus: directory traversal |
| CVE-2022-4245 | 4.3 MEDIUM | Codehaus-plexus: xml external entity (xxe) injection |
IV. Related Vulnerabilities
Same product: Red Hat Enterprise Linux 7
-
CVE-2026-71224
Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) -
CVE-2026-71222
Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecke -
CVE-2026-71221
Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchec -
CVE-2026-71220
Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchec -
CVE-2026-71219
Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_dept
Same vendor: Red Hat
-
CVE-2026-103754
Ansible-runner: ansible-runner: path traversal and symlink e -
CVE-2026-96577
Oc-mirror__release-4.21: embedded local cache registry liste -
CVE-2026-83589
Oauth-proxy: open redirect via /\ and /\t bypass in post-log -
CVE-2026-103641
Gegl: gegl04: gegl: out-of-bounds read in the radiance hdr u -
CVE-2026-103399
Libsoup: soupserver: http/1 request smuggling via undrained
V. Comments for CVE-2023-42753
No comments yet