{"id":24500,"date":"2023-05-18T08:38:37","date_gmt":"2023-05-18T08:38:37","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=24500"},"modified":"2026-04-17T18:07:41","modified_gmt":"2026-04-17T18:07:41","slug":"linux-kernel-privilege-escalation-vulnerability-cvs-2023-32233-notice","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/linux-kernel-privilege-escalation-vulnerability-cvs-2023-32233-notice\/","title":{"rendered":"Linux Kernel Privilege Escalation Vulnerability (CVS 2023-32233) Notice"},"content":{"rendered":"\n

Overview<\/h2>\n\n\n\n

Recently, NSFOCUS CERT found that the PoC of Linux Kernel privilege escalation vulnerability (CVE-2023-32233) was publicly disclosed online. There is a use-after-free vulnerability in Linux kernel’s subsystem Netfilter nf_tables, which can be exploited by authenticated local attackers to perform arbitrary read and write operations in kernel memory, ultimately elevating permissions to ROOT. The CVSS score is 7.8, affected users are advised to take protective measures as soon as possible.<\/p>\n\n\n\n

Netfilter is a framework provided by the Linux kernel that allows various network related operations to be implemented in the form of custom handlers. Netfilter provides various functions and operations for packet filtering, network address translation, and port translation. They provide the functions required to guide packets through the network and prevent them from reaching sensitive locations in the network. <\/p>\n\n\n\n

CVS 2023-32233 Vulnerability Status:<\/p>\n\n\n\n

Vulnerability Details<\/strong><\/td>Vulnerability PoC<\/strong><\/td>Vulnerability EXP<\/strong><\/td>Utilization in the wilderness<\/strong><\/td><\/tr>
Published<\/td>Published<\/td>Published<\/td>Not yet detected<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

Reference link: https:\/\/www.openwall.com\/lists\/oss-security\/2023\/05\/15\/5<\/a><\/p>\n\n\n\n

Scope of Impact<\/h2>\n\n\n\n

Affected<\/strong> version<\/strong><\/p>\n\n\n\n