Rewterz Threat Advisory – CVE-2023-42753 – Linux Kernel Vulnerability

Severity

High

Analysis Summary

CVE-2023-42753

Linux Kernel could allow a local authenticated attacker to execute arbitrary code on the system, caused by an integer underflow due to an array indexing issue in the netfilter ipset subsystem. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition.

Impact

• Code Execution

Indicators Of Compromise

CVE

• CVE-2023-42753

Affected Vendors

Linux

Affected Products

• Linux Kernel 5.10
• Linux Kernel 5.15
• Linux Kernel 6.1

Remediation

Refer to Linux Kernel GIT Repository for patch, upgrade or suggested workaround information.

Linux Kernel GIT Repository