LSN-0103-1: Kernel Live Patch Security Notice

Lonial Con discovered that the netfilter subsystem in the Linux kernel
contained a memory leak when handling certain element flush operations. A
local attacker could use this to expose sensitive information (kernel
memory).(CVE-2023-4569)

Xingyuan Mo discovered that the netfilter subsystem in the Linux kernel did
not properly handle inactive elements in its PIPAPO data structure, leading
to a use-after-free vulnerability. A local attacker could use this to cause
a denial of service (system crash) or possibly execute arbitrary code.(CVE-2023-6817)

It …

attacker con cve data expose flush handling information kernel leak linux linux kernel live local memory memory leak netfilter notice operations patch security security notice sensitive sensitive information subsystem