CVE-2023-42753

CVE-2023-42753 · Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

CVSS 7.0 · High · EPSS 0.5% · Fix available

Published: 2023-09-25T20:25:59.706Z
Updated: 2026-10-14T23:47:47.191Z

Stack: system

Affected products and versions

red hat enterprise linux 7
Versions
- ≥ 0:3.10.0-1160.108.1.rt56.1259.el7: Not affected (rpm)
No fix published
red hat enterprise linux 7
Versions
- ≥ 0:3.10.0-1160.108.1.el7: Not affected (rpm)
No fix published
red hat enterprise linux 7
No fix published
red hat enterprise linux 7.7 advanced update support
Versions
- ≥ 0:3.10.0-1062.85.1.el7: Not affected (rpm)
No fix published
red hat enterprise linux 8
Versions
- ≥ 0:4.18.0-513.11.1.rt7.313.el8_9: Not affected (rpm)
No fix published
red hat enterprise linux 8
No fix published
red hat enterprise linux 8
Versions
- ≥ 0:4.18.0-513.11.1.el8_9: Not affected (rpm)
No fix published
red hat enterprise linux 8.2 advanced update support
Versions
- ≥ 0:4.18.0-193.120.1.el8_2: Not affected (rpm)
No fix published
red hat enterprise linux 8.2 telecommunications update service
Versions
- ≥ 0:4.18.0-193.120.1.rt13.171.el8_2: Not affected (rpm)
No fix published
red hat enterprise linux 8.2 telecommunications update service
Versions
- ≥ 0:4.18.0-193.120.1.el8_2: Not affected (rpm)
No fix published
red hat enterprise linux 8.2 update services for sap solutions
No fix published
red hat enterprise linux 8.2 update services for sap solutions
Versions
- ≥ 0:4.18.0-193.120.1.el8_2: Not affected (rpm)
No fix published
red hat enterprise linux 8.4 advanced mission critical update support
Versions
- ≥ 0:4.18.0-305.120.1.el8_4: Not affected (rpm)
No fix published
red hat enterprise linux 8.4 telecommunications update service
Versions
- ≥ 0:4.18.0-305.120.1.rt7.196.el8_4: Not affected (rpm)
No fix published
red hat enterprise linux 8.4 telecommunications update service
Versions
- ≥ 0:4.18.0-305.120.1.el8_4: Not affected (rpm)
No fix published
red hat enterprise linux 8.4 update services for sap solutions
Versions
- ≥ 0:4.18.0-305.120.1.el8_4: Not affected (rpm)
No fix published
red hat enterprise linux 8.4 update services for sap solutions
No fix published
red hat enterprise linux 8.6 extended update support
No fix published
red hat enterprise linux 8.6 extended update support
Versions
- ≥ 0:4.18.0-372.87.1.el8_6: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 extended update support
Versions
- ≥ 0:4.18.0-477.36.1.el8_8: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 extended update support
No fix published
red hat enterprise linux 9
Versions
- ≥ 0:5.14.0-362.18.1.el9_3: Not affected (rpm)
No fix published
red hat enterprise linux 9
No fix published
red hat enterprise linux 9.0 extended update support
Versions
- ≥ 0:5.14.0-70.80.1.el9_0: Not affected (rpm)
No fix published

Original sources

Check your server →