CVE-2023-6111: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_trans_gc_catchall did not remove the catchall set element from the catchall_list when the argument sync is true, making it possible to free a catchall set element many times. We recommend upgrading past commit 93995bf4af2c5a99e2a87f0cd5ce547d31eb7630.

Affected products

• Linux Linux Kernel: from 5.15.134, before 5.15.140 (fixed in 5.15.140); from 6.1.56, before 6.1.64 (fixed in 6.1.64); from 6.5.6, before 6.5.13 (fixed in 6.5.13); from 6.6, before 6.6.3 (fixed in 6.6.3)

Published 2023-11-14. Last modified 2026-06-17.