CVE-2023-4147: Debian Linux

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.

Affected products

• Debian Debian Linux: version 10.0 only; version 11.0 only; version 12.0 only
• Fedoraproject Fedora: version 38 only
• Linux Linux Kernel: from 5.9, before 5.10.190 (fixed in 5.10.190); from 5.11, before 5.15.124 (fixed in 5.15.124); from 5.16, before 6.1.43 (fixed in 6.1.43); from 6.2, before 6.4.8 (fixed in 6.4.8); version 6.5 only
• Red Hat Enterprise Linux: version 9.0 only
• Red Hat Enterprise Linux Eus: version 9.2 only
• Red Hat Enterprise Linux For Real Time: version 9.0 only
• Red Hat Enterprise Linux For Real Time For Nfv: version 9.0 only
• Red Hat Enterprise Linux Server Aus: version 9.2 only

Published 2023-08-07. Last modified 2026-06-17.