{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageName":"kernel","product":"Linux Kernel","repo":"https://git.kernel.org","vendor":"Linux","versions":[{"lessThan":"4.14.322","status":"affected","version":"3.16","versionType":"custom"},{"lessThan":"4.19.291","status":"affected","version":"4.15","versionType":"custom"},{"lessThan":"5.4.251","status":"affected","version":"4.20","versionType":"custom"},{"lessThan":"5.10.188","status":"affected","version":"5.5","versionType":"custom"},{"lessThan":"5.15.118","status":"affected","version":"5.11","versionType":"custom"},{"lessThan":"6.1.35","status":"affected","version":"5.16","versionType":"custom"},{"lessThan":"6.3.9","status":"affected","version":"6.2","versionType":"custom"}]}],"source":"cve-coordination@google.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"972136DA-4F77-490A-B239-498F36EEDCBE","versionEndExcluding":"4.14.322","versionStartIncluding":"3.16","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"D2D2CA9F-4CC4-4AF5-8C6D-E58415AB782E","versionEndExcluding":"4.19.291","versionStartIncluding":"4.15","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"7FA663C4-CA72-4B5A-8592-7354D978F58E","versionEndExcluding":"5.4.251","versionStartIncluding":"4.20","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"43CAE50A-4A6C-488E-813C-F8DB77C13C8B","versionEndExcluding":"5.10.188","versionStartIncluding":"5.5","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"08F0D9B5-7024-417D-ABDD-BAAB8C645D72","versionEndExcluding":"5.15.118","versionStartIncluding":"5.11","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"05A707A2-83A7-4FED-8BE0-DBB381F97694","versionEndExcluding":"6.1.35","versionStartIncluding":"5.16","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"7DE06036-A8A1-4685-8575-2B94D6FD3278","versionEndExcluding":"6.3.9","versionStartIncluding":"6.2","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*","matchCriteriaId":"9F9C8C20-42EB-4AB5-BD97-212DEB070C43","vulnerable":true},{"criteria":"cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*","matchCriteriaId":"CDDF61B7-EC5C-467C-B710-B89F502CD04F","vulnerable":true},{"criteria":"cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*","matchCriteriaId":"8497A4C9-8474-4A62-8331-3FE862ED4098","vulnerable":true},{"criteria":"cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*","matchCriteriaId":"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9","vulnerable":true},{"criteria":"cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*","matchCriteriaId":"B06F4839-D16A-4A61-9BB5-55B13F41E47F","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c.\n\nMishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue.\n\nWe recommend upgrading past commit 1240eb93f0616b21c675416516ff3d74798fdc97"},{"lang":"es","value":"Se encontró una vulnerabilidad de use-after-free en el subsistema netfilter del kernel de Linux en net/netfilter/nf_tables_api.c. El manejo de errores mal manejado con NFT_MSG_NEWRULE permite usar un puntero colgante en la misma transacción que causa una vulnerabilidad de use-after-free. Esta falla permite que un atacante local con acceso de usuario cause un problema de escalada de privilegios. Recomendamos actualizar al commit anterior 1240eb93f0616b21c675416516ff3d74798fdc97."}],"id":"CVE-2023-3390","lastModified":"2026-07-22T12:16:53.413","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"cve-coordination@google.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2023-06-28T21:15:10.447","references":[{"source":"cve-coordination@google.com","tags":["Mailing List","Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1240eb93f0616b21c675416516ff3d74798fdc97"},{"source":"cve-coordination@google.com","tags":["Patch"],"url":"https://kernel.dance/1240eb93f0616b21c675416516ff3d74798fdc97"},{"source":"cve-coordination@google.com","tags":["Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html"},{"source":"cve-coordination@google.com","tags":["Third Party Advisory","VDB Entry"],"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"},{"source":"cve-coordination@google.com","url":"https://lists.debian.org/debian-security-announce/2023/msg00140.html"},{"source":"cve-coordination@google.com","url":"https://lists.debian.org/debian-security-announce/2023/msg00153.html"},{"source":"cve-coordination@google.com","url":"https://packetstorm.news/tos/aHR0cHM6Ly9wYWNrZXRzdG9ybS5uZXdzL2ZpbGVzLzE3NDU3Ny9LZXJuZWwtTGl2ZS1QYXRjaC1TZWN1cml0eS1Ob3RpY2UtTFNOLTAwOTctMS5odG1sIDE3ODQ3MjE0NzIgODFlMjk3ZjBmM2FiMTIwOTI5Nzg0ZmRlNGM2NWNjNjBhMThhMzBiOGE5NjQ0YzQ0NTFhMzJlZjhiNTk1ZTk2Yg=="},{"source":"cve-coordination@google.com","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20230818-0004/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1240eb93f0616b21c675416516ff3d74798fdc97"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://kernel.dance/1240eb93f0616b21c675416516ff3d74798fdc97"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20230818-0004/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.debian.org/security/2023/dsa-5448"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.debian.org/security/2023/dsa-5461"}],"sourceIdentifier":"cve-coordination@google.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"cve-coordination@google.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-416"}],"source":"nvd@nist.gov","type":"Primary"}]}