What is CVE-2023-42753?

CVE-2023-42753 is a high-severity vulnerability affecting the netfilter subsystem of the Linux kernel. This issue may allow a local user to crash the system or potentially escalate their privileges on various Linux-based systems, including certain versions of Red Hat Enterprise Linux and Debian Linux. The vulnerability is caused by an array indexing issue, leading to out-of-bounds write access. It is important for users of affected systems to apply the necessary security updates to mitigate the risk associated with this vulnerability.

Who is impacted by this?

CVE-2023-42753 affects local users of the Linux kernel with the netfilter subsystem. It impacts Linux kernel versions up to (excluding) 6.6, Red Hat Enterprise Linux 7.0, 8.0, and 9.0, and Debian Linux 10.0. Additionally, users of Ubuntu and its derivatives, as well as various releases of Red Hat Enterprise Linux, including 9.2 Extended Update Support, are affected. This vulnerability could allow an attacker to crash the system or potentially escalate their privileges on the affected systems.

What to do if CVE-2023-42753 affected you

If you're affected by the CVE-2023-42753 vulnerability, it's crucial to take action to secure your system. Here's a simplified step-by-step guide:

1. Update your Linux kernel or kernel livepatch to the latest version.

2. For Red Hat Enterprise Linux users, apply the security updates provided in the advisories.

3. Reboot your system to ensure the updates take effect.

By following these steps, you can mitigate the risk associated with this vulnerability and protect your system from potential attacks.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-42753 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog. It is a high-severity issue affecting the netfilter subsystem of the Linux kernel, and users of affected systems should apply the necessary security updates to mitigate the risk associated with this vulnerability.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-787, an out-of-bounds write issue affecting the netfilter subsystem of the Linux kernel.

Learn More

For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or refer to the sources below.

• Kernel Live Patch Security Notice LSN-0099-1

• RHSA-2023:7370 - Security Advisory

• RHSA-2023:7379 - Security Advisory

• RHSA-2023:7382 - Security Advisory