CVE-2023-6040— An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family)
Quick assessment
Affected
The Linux Kernel Organization linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
netfilter是一款使用在Linux系统中的数据包过滤框架。 netfilter存在安全漏洞，该漏洞源于“nf_tables_newtable”函数中缺乏针对无效 nf_tables 系列 (pf) 值的保护措施。攻击者利用该漏洞能够实现越界访问。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-6040
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family)
Source: CVE Program / CVE List V5
Vulnerability Description
An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function enables an attacker to achieve out-of-bounds access.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Vulnerability Title
netfilter 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
netfilter是一款使用在Linux系统中的数据包过滤框架。 netfilter存在安全漏洞，该漏洞源于“nf_tables_newtable”函数中缺乏针对无效 nf_tables 系列 (pf) 值的保护措施。攻击者利用该漏洞能够实现越界访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| The Linux Kernel Organization | linux | 0 ~ 5.18-rc1 | - |
|
II. Public POCs for CVE-2023-6040
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-6040
请登录查看更多情报信息。
Vendor Advisories for CVE-2023-6040 (1)
-
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6040 issue-tracking
Exploits & Public PoCs for CVE-2023-6040 (1)
Mailing List Discussions for CVE-2023-6040 (4)
IV. Related Vulnerabilities
Same product: linux
-
CVE-2026-99999
ipv4: validate checksum_start before completing checksum -
CVE-2026-98432
ipv4: free inet_opt and ireq_opt after an RCU grace period -
CVE-2026-98431
RDMA/uverbs: Fix mmap_lock/disassociation_lock circular depe -
CVE-2026-98430
RDMA/efa: Keep admin queues alive while IRQ is registered -
CVE-2026-98429
RDMA/efa: Keep EQ resources alive while IRQ is registered
Same weakness: CWE-125
-
CVE-2026-111677
Antiword through 0.37 Heap Out-of-Bounds Read via vGet8LstIn -
CVE-2026-111678
Antiword through 0.37 Stack Out-of-Bounds Read via prop8.c F -
CVE-2026-49868
RIOT: DHCPv6 client _parse_reply() missing sub-option length -
CVE-2026-68906
libIEC61850: Infinite loop and out-of-bounds read in ACSE pa -
CVE-2026-68907
libIEC61850: Server-side out-of-bounds stack read in associa
V. Comments for CVE-2023-6040
No comments yet