CVE-2023-4244

22

FAUCET Score

CVE-2023-4244 is a use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component, affecting Debian and other Linux kernel distributions. This flaw, stemming from a race condition during garbage collection, allows for local privilege escalation. Rated 7.0 HIGH on CVSS, it requires low privileges and high attack complexity, but can lead to complete compromise of confidentiality, integrity, and availability. Currently, there is no public exploit code, active exploitation, or significant community discussion, and it is not listed in CISA's KEV catalog.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 0.0, < 6.5CPE match	cpe:2.3:a:linux:kernel::::::::
		< 6.5CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		10.0CPE matchmatch criteria	cpe:2.3:o:debian:debian_linux:10.0:::::::*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

1.8

Impact Score

5.9

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.22%

Probability of exploitation in next 30 days

EPSS Percentile

12.6%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0022 is in the 39th percentile among its peer group of 1,525 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.4 InfoSec Media, 0.1 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (27)

microsoftpatch availablevia msrc

Product: 17917-16823Fixed in: 5.15.135.1-2

microsoftpatch availablevia msrc

Product: cbl2 kernel 5.15.135.1-2 on CBL Mariner 2.0Fixed in: 5.15.135.1-2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt-0:4.18.0-553.rt7.342.el8_10

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kernel-0:5.14.0-362.24.1.el9_3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: kernel-0:5.14.0-70.101.1.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: kernel-rt-0:5.14.0-70.101.1.rt21.173.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: kernel-0:5.14.0-284.55.1.el9_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: kernel-rt-0:5.14.0-284.55.1.rt14.340.el9_2

redhatpatch availablevia redhat_api

Product: RHOL-5.8-RHEL-9Fixed in: openshift-logging/cluster-logging-operator-bundle:v5.8.6-22

redhatpatch availablevia redhat_api

Product: RHOL-5.8-RHEL-9Fixed in: openshift-logging/cluster-logging-rhel9-operator:v5.8.6-11

redhatpatch availablevia redhat_api

Product: RHOL-5.8-RHEL-9Fixed in: openshift-logging/elasticsearch6-rhel9:v6.8.1-407

redhatpatch availablevia redhat_api

Product: RHOL-5.8-RHEL-9Fixed in: openshift-logging/elasticsearch-operator-bundle:v5.8.6-19

redhatpatch availablevia redhat_api

Product: RHOL-5.8-RHEL-9Fixed in: openshift-logging/elasticsearch-proxy-rhel9:v1.0.0-479

redhatpatch availablevia redhat_api

Product: RHOL-5.8-RHEL-9Fixed in: openshift-logging/elasticsearch-rhel9-operator:v5.8.6-7

redhatpatch availablevia redhat_api

Product: RHOL-5.8-RHEL-9Fixed in: openshift-logging/eventrouter-rhel9:v0.4.0-247

redhatpatch availablevia redhat_api

Product: RHOL-5.8-RHEL-9Fixed in: openshift-logging/fluentd-rhel9:v5.8.6-5

redhatpatch availablevia redhat_api

Product: RHOL-5.8-RHEL-9Fixed in: openshift-logging/log-file-metric-exporter-rhel9:v1.1.0-227

redhatpatch availablevia redhat_api

Product: RHOL-5.8-RHEL-9Fixed in: openshift-logging/logging-curator5-rhel9:v5.8.1-470

redhatpatch availablevia redhat_api

Product: RHOL-5.8-RHEL-9Fixed in: openshift-logging/logging-loki-rhel9:v2.9.6-14

redhatpatch availablevia redhat_api

Product: RHOL-5.8-RHEL-9Fixed in: openshift-logging/logging-view-plugin-rhel9:v5.8.6-2

redhatpatch availablevia redhat_api

Product: RHOL-5.8-RHEL-9Fixed in: openshift-logging/loki-operator-bundle:v5.8.6-24

redhatpatch availablevia redhat_api

Product: RHOL-5.8-RHEL-9Fixed in: openshift-logging/loki-rhel9-operator:v5.8.6-10

redhatpatch availablevia redhat_api

Product: RHOL-5.8-RHEL-9Fixed in: openshift-logging/lokistack-gateway-rhel9:v0.1.0-525

redhatpatch availablevia redhat_api

Product: RHOL-5.8-RHEL-9Fixed in: openshift-logging/opa-openshift-rhel9:v0.1.0-224

redhatpatch availablevia redhat_api

Product: RHOL-5.8-RHEL-9Fixed in: openshift-logging/vector-rhel9:v0.28.1-56

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kernel-0:4.18.0-553.el8_10

redhatno patchvia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt

Vendor Advisories (2)

microsoft2023-Sep/CVE-2023-4244Important

Use-after-free in Linux kernel's netfilter: nf_tables component

redhatCVE-2023-4244Moderate

kernel: Use-after-free in nft_verdict_dump due to a race between set GC and transaction

References

git.kernel.org / pub/scm/linux/kernel/git/torvalds/linux.git/commit

Issue TrackingMailing ListPatchVendor Advisory

kernel.dance / 3e91b0ebd994635df2346353322ac51ce84ce6d8

PatchVendor Advisory

lists.debian.org / debian-lts-announce/2023/10/msg00027.html

Mailing ListThird Party Advisory

lists.debian.org / debian-lts-announce/2024/01/msg00004.html