CVE-2023-32233

27

FAUCET Score

CVE-2023-32233 is a high-severity use-after-free vulnerability in the Netfilter nf_tables component of the Linux kernel, affecting versions through 6.3.1, including various enterprise Linux distributions. This flaw allows unprivileged local users to achieve root privileges by performing arbitrary kernel memory read and write operations. The CVSS score is 7.8 (High), indicating a low attack complexity and no user interaction required for a successful exploit. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, suggesting awareness among potential attackers.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 3.13, < 4.14.315CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 4.15, < 4.19.283CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 4.20, < 5.4.243CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 5.5, < 5.10.180CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 5.11, < 5.15.111CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

1.8

Impact Score

5.9

CvssVersion

3.1

Exploit Intelligence

EPSS Score

12.97%

Probability of exploitation in next 30 days

EPSS Percentile

95.9%

Percentile rank of EPSS score among Peer Group

As of 2026-07-28

Model: v2026.06.15

This CVE's current EPSS score of 0.1297 is in the 99th percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (38)

github_advisorypatch availablevia nvd_reference

microsoftpatch availablevia msrc

Product: CBL Mariner 1.0 ARMFixed in: 5.10.181.1-1

microsoftpatch availablevia msrc

Product: cbl2 kernel 5.15.112.1-1 on CBL Mariner 2.0Fixed in: 5.15.112.1-1

microsoftpatch availablevia msrc

Product: CBL Mariner 2.0 x64Fixed in: 5.15.112.1-1

microsoftpatch availablevia msrc

Product: CBL Mariner 2.0 ARMFixed in: 5.15.112.1-1

microsoftpatch availablevia msrc

Product: CBL Mariner 1.0 x64Fixed in: 5.10.181.1-1

microsoftpatch availablevia msrc

Product: cm1 kernel 5.10.181.1-1 on CBL Mariner 1.0Fixed in: 5.10.181.1-1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt-0:4.18.0-477.13.1.rt7.276.el8_8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kernel-0:4.18.0-477.13.1.el8_8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.1 Update Services for SAP SolutionsFixed in: kernel-0:4.18.0-147.85.1.el8_1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.1 Update Services for SAP SolutionsFixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: kernel-0:4.18.0-193.109.1.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceFixed in: kernel-rt-0:4.18.0-193.109.1.rt13.160.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceFixed in: kernel-0:4.18.0-193.109.1.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsFixed in: kernel-0:4.18.0-193.109.1.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: kernel-0:4.18.0-305.97.1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: kernel-rt-0:4.18.0-305.97.1.rt7.172.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: kernel-0:4.18.0-305.97.1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: kernel-0:4.18.0-305.97.1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Extended Update SupportFixed in: kernel-0:4.18.0-372.64.1.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Extended Update SupportFixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kernel-0:5.14.0-284.18.1.el9_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt-0:5.14.0-284.18.1.rt14.303.el9_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: kernel-0:5.14.0-70.58.1.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: kernel-rt-0:5.14.0-70.58.1.rt21.129.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 8Fixed in: kernel-0:4.18.0-372.64.1.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsFixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: kernel-rt-0:3.10.0-1160.102.1.rt56.1250.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: kpatch-patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: kernel-0:3.10.0-1160.102.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.4 Advanced Update SupportFixed in: kernel-0:3.10.0-693.112.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.6 Advanced Update Support(Disable again in 2026 - SPRHEL-7118)Fixed in: kernel-0:3.10.0-957.105.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.7 Advanced Update SupportFixed in: kernel-0:3.10.0-1062.79.1.el7

redhatworkaround availablevia nvd_reference

Vendor Advisories (4)

microsoft2023-Jun/CVE-2023-32233

CVE-2023-32233

microsoft2023-May/CVE-2023-32233Important

In the Linux kernel through 6.3.1 a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.

linuxCVE-2023-32233HIGH

In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.

redhatCVE-2023-32233Important

kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege escalation

References

packetstormsecurity.com / files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html

PatchThird Party Advisory

bugzilla.redhat.com / show_bug.cgi

Issue TrackingMitigationThird Party Advisory

github.com / torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab

Patch

git.kernel.org / cgit/linux/kernel/git/torvalds/linux.git/commit

Mailing ListPatch

lists.debian.org / debian-lts-announce/2023/06/msg00008.html

Third Party Advisory

lists.debian.org / debian-lts-announce/2023/07/msg00030.html

Mailing ListThird Party Advisory

news.ycombinator.com / item

Issue Tracking

security.netapp.com / advisory/ntap-20230616-0002

Mailing ListThird Party Advisory

debian.org / security/2023/dsa-5402

Mailing ListThird Party Advisory

openwall.com / lists/oss-security/2023/05/08/4

Mailing ListPatchThird Party Advisory

openwall.com / lists/oss-security/2023/05/15/5

Mailing ListThird Party Advisory