GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2023-54243 (GCVE-0-2023-54243)

Vulnerability from cvelistv5 – Published: 2025-12-30 12:11 – Updated: 2026-08-05 09:18
VLAI
Title
netfilter: ebtables: fix table blob use-after-free
Summary
In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix table blob use-after-free We are not allowed to return an error at this point. Looking at the code it looks like ret is always 0 at this point, but its not. t = find_table_lock(net, repl->name, &ret, &ebt_mutex); ... this can return a valid table, with ret != 0. This bug causes update of table->private with the new blob, but then frees the blob right away in the caller. Syzbot report: BUG: KASAN: vmalloc-out-of-bounds in __ebt_unregister_table+0xc00/0xcd0 net/bridge/netfilter/ebtables.c:1168 Read of size 4 at addr ffffc90005425000 by task kworker/u4:4/74 Workqueue: netns cleanup_net Call Trace: kasan_report+0xbf/0x1f0 mm/kasan/report.c:517 __ebt_unregister_table+0xc00/0xcd0 net/bridge/netfilter/ebtables.c:1168 ebt_unregister_table+0x35/0x40 net/bridge/netfilter/ebtables.c:1372 ops_exit_list+0xb0/0x170 net/core/net_namespace.c:169 cleanup_net+0x4ee/0xb10 net/core/net_namespace.c:613 ... ip(6)tables appears to be ok (ret should be 0 at this point) but make this more obvious.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: c58dd2dd443c26d856a168db108a0cd11c285bf3 , < 9060abce3305ab2354c892c09d5689df51486df5 (git)
Affected: c58dd2dd443c26d856a168db108a0cd11c285bf3 , < dbb3cbbf03b3c52cb390fabec357f1e4638004f5 (git)
Affected: c58dd2dd443c26d856a168db108a0cd11c285bf3 , < 3dd6ac973351308d4117eda32298a9f1d68764fd (git)
Affected: c58dd2dd443c26d856a168db108a0cd11c285bf3 , < cda0e0243bd3c04008fcd37a46b0269fb3c49249 (git)
Affected: c58dd2dd443c26d856a168db108a0cd11c285bf3 , < e58a171d35e32e6e8c37cfe0e8a94406732a331f (git)
Affected: a3bc0f8ea439762aa62d40a295157410498cbea7 (git)
Affected: 8ed40c122919cd79bc3c059e5864e5e7d9d455f0 (git)
Affected: c5e4ef499cfc78de45a4f01b8c557b5964d77c53 (git)
Affected: f34728610b2a8c7b9864f9404f2884c17f6fca5c (git)
Affected: 8b5740915a9faa8b1fa9166193a33e2a9ae30ec6 (git)
Affected: 3.2.60 , < 3.3 (semver)
Affected: 3.4.91 , < 3.5 (semver)
Affected: 3.10.41 , < 3.11 (semver)
Affected: 3.12.21 , < 3.13 (semver)
Affected: 3.14.5 , < 3.15 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 3.15
Unaffected: 0 , < 3.15 (semver)
Unaffected: 5.10.173 , ≤ 5.10.* (semver)
Unaffected: 5.15.100 , ≤ 5.15.* (semver)
Unaffected: 6.1.18 , ≤ 6.1.* (semver)
Unaffected: 6.2.5 , ≤ 6.2.* (semver)
Unaffected: 6.3 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/bridge/netfilter/ebtables.c",
            "net/ipv4/netfilter/ip_tables.c",
            "net/ipv6/netfilter/ip6_tables.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "9060abce3305ab2354c892c09d5689df51486df5",
              "status": "affected",
              "version": "c58dd2dd443c26d856a168db108a0cd11c285bf3",
              "versionType": "git"
            },
            {
              "lessThan": "dbb3cbbf03b3c52cb390fabec357f1e4638004f5",
              "status": "affected",
              "version": "c58dd2dd443c26d856a168db108a0cd11c285bf3",
              "versionType": "git"
            },
            {
              "lessThan": "3dd6ac973351308d4117eda32298a9f1d68764fd",
              "status": "affected",
              "version": "c58dd2dd443c26d856a168db108a0cd11c285bf3",
              "versionType": "git"
            },
            {
              "lessThan": "cda0e0243bd3c04008fcd37a46b0269fb3c49249",
              "status": "affected",
              "version": "c58dd2dd443c26d856a168db108a0cd11c285bf3",
              "versionType": "git"
            },
            {
              "lessThan": "e58a171d35e32e6e8c37cfe0e8a94406732a331f",
              "status": "affected",
              "version": "c58dd2dd443c26d856a168db108a0cd11c285bf3",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a3bc0f8ea439762aa62d40a295157410498cbea7",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8ed40c122919cd79bc3c059e5864e5e7d9d455f0",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c5e4ef499cfc78de45a4f01b8c557b5964d77c53",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "f34728610b2a8c7b9864f9404f2884c17f6fca5c",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8b5740915a9faa8b1fa9166193a33e2a9ae30ec6",
              "versionType": "git"
            },
            {
              "lessThan": "3.3",
              "status": "affected",
              "version": "3.2.60",
              "versionType": "semver"
            },
            {
              "lessThan": "3.5",
              "status": "affected",
              "version": "3.4.91",
              "versionType": "semver"
            },
            {
              "lessThan": "3.11",
              "status": "affected",
              "version": "3.10.41",
              "versionType": "semver"
            },
            {
              "lessThan": "3.13",
              "status": "affected",
              "version": "3.12.21",
              "versionType": "semver"
            },
            {
              "lessThan": "3.15",
              "status": "affected",
              "version": "3.14.5",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/bridge/netfilter/ebtables.c",
            "net/ipv4/netfilter/ip_tables.c",
            "net/ipv6/netfilter/ip6_tables.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.15"
            },
            {
              "lessThan": "3.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.173",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.100",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.18",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.2.*",
              "status": "unaffected",
              "version": "6.2.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.173",
                  "versionStartIncluding": "3.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.100",
                  "versionStartIncluding": "3.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.18",
                  "versionStartIncluding": "3.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2.5",
                  "versionStartIncluding": "3.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3",
                  "versionStartIncluding": "3.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.2.60",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.4.91",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.10.41",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.12.21",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.14.5",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ebtables: fix table blob use-after-free\n\nWe are not allowed to return an error at this point.\nLooking at the code it looks like ret is always 0 at this\npoint, but its not.\n\nt = find_table_lock(net, repl-\u003ename, \u0026ret, \u0026ebt_mutex);\n\n... this can return a valid table, with ret != 0.\n\nThis bug causes update of table-\u003eprivate with the new\nblob, but then frees the blob right away in the caller.\n\nSyzbot report:\n\nBUG: KASAN: vmalloc-out-of-bounds in __ebt_unregister_table+0xc00/0xcd0 net/bridge/netfilter/ebtables.c:1168\nRead of size 4 at addr ffffc90005425000 by task kworker/u4:4/74\nWorkqueue: netns cleanup_net\nCall Trace:\n kasan_report+0xbf/0x1f0 mm/kasan/report.c:517\n __ebt_unregister_table+0xc00/0xcd0 net/bridge/netfilter/ebtables.c:1168\n ebt_unregister_table+0x35/0x40 net/bridge/netfilter/ebtables.c:1372\n ops_exit_list+0xb0/0x170 net/core/net_namespace.c:169\n cleanup_net+0x4ee/0xb10 net/core/net_namespace.c:613\n...\n\nip(6)tables appears to be ok (ret should be 0 at this point) but make\nthis more obvious."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable path is reached through the ebtables setsockopt configuration interface (EBT_SO_SET_ENTRIES \u2192 do_replace), a local syscall on a socket, not remote network data.\nAC:L - The attacker fully controls the triggering sequence (table replacement with module autoload, plus any concurrent registration race), and syzbot reproduced it reliably; per guidance attacker-controlled races and UAFs are Low.\nPR:L - The path requires CAP_NET_ADMIN only over net-\u003euser_ns, which an unprivileged user obtains in a fresh user+network namespace via `unshare -Urn`; no real root is needed.\nUI:N - The attacker triggers the entire flow via their own setsockopt calls; no victim action is required.\nS:U - The corruption stays within the kernel\u0027s own memory/security authority in the same (namespaced) context; no VM/IOMMU boundary is crossed.\nC:H - The freed table blob remains live as t-\u003eprivate and is reallocatable by the attacker, allowing controlled reads (counters, kernel data) \u2014 a use-after-free yields high confidentiality impact.\nI:H - The UAF lets the attacker place a crafted blob at the freed address; ebt_do_table dereferences target function pointers from it, giving heap-spray-based arbitrary write / control-flow hijack.\nA:H - The use-after-free causes kernel oops/panic (as shown by the KASAN report in __ebt_unregister_table) and is trivially weaponizable into a crash."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:18:22.593Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/9060abce3305ab2354c892c09d5689df51486df5"
        },
        {
          "url": "https://git.kernel.org/stable/c/dbb3cbbf03b3c52cb390fabec357f1e4638004f5"
        },
        {
          "url": "https://git.kernel.org/stable/c/3dd6ac973351308d4117eda32298a9f1d68764fd"
        },
        {
          "url": "https://git.kernel.org/stable/c/cda0e0243bd3c04008fcd37a46b0269fb3c49249"
        },
        {
          "url": "https://git.kernel.org/stable/c/e58a171d35e32e6e8c37cfe0e8a94406732a331f"
        }
      ],
      "title": "netfilter: ebtables: fix table blob use-after-free",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-54243",
    "datePublished": "2025-12-30T12:11:31.180Z",
    "dateReserved": "2025-12-30T12:06:44.510Z",
    "dateUpdated": "2026-08-05T09:18:22.593Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-54243",
      "date": "2026-09-19",
      "epss": "0.00145",
      "percentile": "0.04183"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "net/bridge/netfilter/ebtables.c",
                  "net/ipv4/netfilter/ip_tables.c",
                  "net/ipv6/netfilter/ip6_tables.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "9060abce3305ab2354c892c09d5689df51486df5",
                    "status": "affected",
                    "version": "c58dd2dd443c26d856a168db108a0cd11c285bf3",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "dbb3cbbf03b3c52cb390fabec357f1e4638004f5",
                    "status": "affected",
                    "version": "c58dd2dd443c26d856a168db108a0cd11c285bf3",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "3dd6ac973351308d4117eda32298a9f1d68764fd",
                    "status": "affected",
                    "version": "c58dd2dd443c26d856a168db108a0cd11c285bf3",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "cda0e0243bd3c04008fcd37a46b0269fb3c49249",
                    "status": "affected",
                    "version": "c58dd2dd443c26d856a168db108a0cd11c285bf3",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e58a171d35e32e6e8c37cfe0e8a94406732a331f",
                    "status": "affected",
                    "version": "c58dd2dd443c26d856a168db108a0cd11c285bf3",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "a3bc0f8ea439762aa62d40a295157410498cbea7",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "8ed40c122919cd79bc3c059e5864e5e7d9d455f0",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "c5e4ef499cfc78de45a4f01b8c557b5964d77c53",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "f34728610b2a8c7b9864f9404f2884c17f6fca5c",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "8b5740915a9faa8b1fa9166193a33e2a9ae30ec6",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "3.3",
                    "status": "affected",
                    "version": "3.2.60",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "3.5",
                    "status": "affected",
                    "version": "3.4.91",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "3.11",
                    "status": "affected",
                    "version": "3.10.41",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "3.13",
                    "status": "affected",
                    "version": "3.12.21",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "3.15",
                    "status": "affected",
                    "version": "3.14.5",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "net/bridge/netfilter/ebtables.c",
                  "net/ipv4/netfilter/ip_tables.c",
                  "net/ipv6/netfilter/ip6_tables.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "3.15"
                  },
                  {
                    "lessThan": "3.15",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.173",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.100",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.18",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.2.*",
                    "status": "unaffected",
                    "version": "6.2.5",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "6.3",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ebtables: fix table blob use-after-free\n\nWe are not allowed to return an error at this point.\nLooking at the code it looks like ret is always 0 at this\npoint, but its not.\n\nt = find_table_lock(net, repl-\u003ename, \u0026ret, \u0026ebt_mutex);\n\n... this can return a valid table, with ret != 0.\n\nThis bug causes update of table-\u003eprivate with the new\nblob, but then frees the blob right away in the caller.\n\nSyzbot report:\n\nBUG: KASAN: vmalloc-out-of-bounds in __ebt_unregister_table+0xc00/0xcd0 net/bridge/netfilter/ebtables.c:1168\nRead of size 4 at addr ffffc90005425000 by task kworker/u4:4/74\nWorkqueue: netns cleanup_net\nCall Trace:\n kasan_report+0xbf/0x1f0 mm/kasan/report.c:517\n __ebt_unregister_table+0xc00/0xcd0 net/bridge/netfilter/ebtables.c:1168\n ebt_unregister_table+0x35/0x40 net/bridge/netfilter/ebtables.c:1372\n ops_exit_list+0xb0/0x170 net/core/net_namespace.c:169\n cleanup_net+0x4ee/0xb10 net/core/net_namespace.c:613\n...\n\nip(6)tables appears to be ok (ret should be 0 at this point) but make\nthis more obvious."
          },
          {
            "lang": "es",
            "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nnetfilter: ebtables: corregir uso despu\u00e9s de liberaci\u00f3n de blob de tabla\n\nNo se nos permite devolver un error en este punto.\nAl mirar el c\u00f3digo parece que ret siempre es 0 en este\npunto, pero no lo es.\n\nt = find_table_lock(net, repl-\u0026gt;name, \u0026amp;ret, \u0026amp;ebt_mutex);\n\n... esto puede devolver una tabla v\u00e1lida, con ret != 0.\n\nEste error causa la actualizaci\u00f3n de table-\u0026gt;private con el nuevo\nblob, pero luego libera el blob inmediatamente en el llamador.\n\nInforme de Syzbot:\n\nERROR: KASAN: vmalloc-fuera-de-l\u00edmites en __ebt_unregister_table+0xc00/0xcd0 net/bridge/netfilter/ebtables.c:1168\nLectura de tama\u00f1o 4 en la direcci\u00f3n ffffc90005425000 por la tarea kworker/u4:4/74\nCola de trabajo: netns cleanup_net\nTraza de llamada:\n kasan_report+0xbf/0x1f0 mm/kasan/report.c:517\n __ebt_unregister_table+0xc00/0xcd0 net/bridge/netfilter/ebtables.c:1168\n ebt_unregister_table+0x35/0x40 net/bridge/netfilter/ebtables.c:1372\n ops_exit_list+0xb0/0x170 net/core/net_namespace.c:169\n cleanup_net+0x4ee/0xb10 net/core/net_namespace.c:613\n...\n\nip(6)tables parece estar bien (ret deber\u00eda ser 0 en este punto) pero hacer\nesto m\u00e1s obvio."
          }
        ],
        "id": "CVE-2023-54243",
        "lastModified": "2026-08-04T11:16:38.120",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2025-12-30T13:16:12.880",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/3dd6ac973351308d4117eda32298a9f1d68764fd"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/9060abce3305ab2354c892c09d5689df51486df5"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/cda0e0243bd3c04008fcd37a46b0269fb3c49249"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/dbb3cbbf03b3c52cb390fabec357f1e4638004f5"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/e58a171d35e32e6e8c37cfe0e8a94406732a331f"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Deferred"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T19:14:26+00:00",
      "cve": "CVE-2023-54243",
      "id": "CVE-2023-54243",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_affected": "198",
      "product_status:known_not_affected": "76",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: netfilter: ebtables: fix table blob use-after-free",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-54243.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.