CVE-2023-35001

Summary

CVE-2023-35001 is a vulnerability affecting the Linux Kernel's nftables module. This issue arises due to the inadequate handling of vm register contents by the nft_byteorder function when CAP_NET_ADMIN capability is present in any user or network namespace. An attacker can exploit this Out-Of-Bounds Read/Write vulnerability to gain unauthorized access to memory, potentially leading to system compromise. The vulnerability exists in a wide range of Linux distributions using nftables and requires a targeted attack to be successfully exploited. Users are encouraged to apply the relevant patches as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.