{"id":112508,"date":"2023-12-26T15:10:15","date_gmt":"2023-12-26T13:10:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/lokalnaya-uyazvimost-v-yadre-linux-ekspluatiruemaya-cherez-nftables"},"modified":"2023-12-26T15:10:15","modified_gmt":"2023-12-26T13:10:15","slug":"lokalnaya-uyazvimost-v-yadre-linux-ekspluatiruemaya-cherez-nftables","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/lokalnaya-uyazvimost-v-yadre-linux-ekspluatiruemaya-cherez-nftables","title":{"rendered":"Local vulnerability in the Linux kernel, exploited through nftables.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
A vulnerability has been identified in the Netfilter subsystem (CVE-2023-6817), potentially allowing a local user to escalate their privileges in the system. The issue is caused by a use-after-free memory access in the nf_tables module, which supports the operation of the nftables packet filter. The vulnerability has been present since Linux kernel version 5.6. A fix for the vulnerability has been proposed in the test release of the Linux kernel 6.7-rc5 and has been backported to the current stable branches 5.10.204, 5.15.143, 6.1.68, and 6.6.7. <\/p>\n
The problem is due to an error in the nft_pipapo_walk function, which did not check for duplicates during the iteration over PIPAPO (Pile Packet Policies) elements, leading to double free of memory. To conduct an attack, access to nftables is required, which can be obtained with CAP_NET_ADMIN privileges in any user namespace or network namespace, which may be granted, for example, in isolated containers. A prototype exploit has been published for testing systems. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"