CVE-2023-32233

In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.

CVSS 3.1

7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

13% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-25)

CWE

CWE-416

Published

2023-05-08

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

Affected

• linux:linux_kernel
• netapp:hci_baseboard_management_controller
• redhat:enterprise_linux

References

• http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html
• http://www.openwall.com/lists/oss-security/2023/05/15/5
• https://bugzilla.redhat.com/show_bug.cgi?id=2196105
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1592a89942e9678f7d9c8030efa777c0d57edab
• https://github.com/torvalds/linux/commit/c1592a89942e9678f7d9c8030efa777c0d57edab

Check your stackJSON