Local denial of service in Linux kernel netfilter

1) Improper access control

EUVDB-ID: #VU89268

Risk: Low

CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-52620

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper access restrictions within the nf_tables_newset() function in net/netfilter/nf_tables_api.c when setting timeouts from userspace. A local user can bypass implemented security restrictions and perform a denial of service attack.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Linux kernel: All versions

External links

http://git.kernel.org/stable/c/00b19ee0dcc1aef06294471ab489bae26d94524e
http://git.kernel.org/stable/c/b7be6c737a179a76901c872f6b4c1d00552d9a1b
http://git.kernel.org/stable/c/e26d3009efda338f19016df4175f354a9bd0a4ab
http://git.kernel.org/stable/c/116b0e8e4673a5faa8a739a19b467010c4d3058c
http://git.kernel.org/stable/c/49ce99ae43314d887153e07cec8bb6a647a19268
http://git.kernel.org/stable/c/6f3ae02bbb62f151b19162d5fdc9fe3d48450323

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.