ZeroDay Findings
Sign inSign up

Findings

CVE-2023-39189

A flaw was found in the Netfilter subsystem in the Linux kernel.

Published Oct 9, 2023 · updated Oct 15, 2026 · Amazon Amazon Linux

A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 9, 2023 · NIST NVD

    Detected

    A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.

  2. Oct 15, 2026 · NIST NVD

    Updated

    A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.

Affected

  • cpe fedoraproject/fedora38
  • cpe linux/linux kernelversion unspecified
  • cpe redhat/enterprise linux8.0
  • cpe redhat/enterprise linux9.0

Sources

  • Amazon LinuxVendor advisoryCVE-2023-39189

    CVE-2023-1611, CVE-2023-39189, CVE-2023-52975, CVE-2024-47745, CVE-2024-49882, CVE-2024-50036, CVE-2024-50278, CVE-2024-50301, CVE-2025-21759, CVE-2025-21791, CVE-2025-21796, CVE-2025-21858, CVE-2025-21991

    alas.aws.amazon.com
  • CVE.orgVulnerability recordCVE-2023-39189

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2023-39189

    30-day exploitation probability 0.4%

    first.org
  • NIST NVDVulnerability recordCVE-2023-39189

    A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or inform

    nvd.nist.gov

References