A vulnerability in the Linux kernel allows for local exploitation through nftables.
A vulnerability has been discovered in the Netfilter subsystem (CVE-2023-6817) that could theoretically be exploited by a local user to elevate their privileges in the system. The root of the problem lies in the use of freed memory (use-after-free) in the nf_tables module, which is responsible for the functionality of the nftables packet filter. The vulnerability is present starting from Linux kernel version 5.6. A fix has been proposed in the test release of Linux kernel 6.7-rc5 and incorporated into […]
