{"uuid": "1f4a416b-56e4-4e2b-8cda-a382723247f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-32233", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/101368", "content": "Black Hat Ethical Hacking\nCritical Linux Kernel Flaw \u2013 Unprivileged Users Gain Root Control\n\nCritical Linux Kernel Flaw \u2013 Unprivileged Users Gain Root ControlPost Views: 171 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Linux Flaw Grants Root Control \u2013 Local Users Exploit Privilege Escalation VulnerabilityA critical flaw has been discovered in the Linux NetFilter kernel, exposing a vulnerability that enables unprivileged local users to escalate their privileges to root level, granting them complete control over a system. The flaw, identified as CVE-2023-32233, is yet to be assigned a severity level. The security issue arises from Netfilter nf_tables, which accepts invalid updates to its configuration, leading to the corruption of the subsystem\u2019s internal state in specific scenarios.\n\nNetfilter serves as a packet filtering and network address translation (NAT) framework integrated into the Linux kernel, managed through front-end utilities like IPtables and UFW. A recent advisory highlights that corrupting the internal state triggers a use-after-free vulnerability, allowing arbitrary reads and writes in the kernel memory.\n\nSecurity researchers shared a proof-of-concept (PoC) exploit on the Openwall mailing list, demonstrating the exploitation of CVE-2023-32233. The impact of this vulnerability extends to multiple Linux kernel releases, including the current stable version 6.3.1. However, local access to a Linux device is required to exploit the flaw.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Linux Kernel Patch Addresses Critical Flaw as Researchers Prepare to Release Privilege Escalation ExploitIn response to the issue, engineer Pablo Neira Ayuso submitted a Linux kernel source code commit to address the problem. This commit introduces two functions that manage the lifecycle of anonymous sets in the Netfilter nf_tables subsystem. By appropriately managing the activation and deactivation of anonymous sets and preventing further updates, the fix prevents memory corruption and the possibility of attackers leveraging the use-after-free issue to escalate privileges to root level. \n\nSecurity researchers Patryk Sondej and Piotr Krysiuk, who discovered the flaw, reported it to the Linux kernel team and developed a PoC exploit that allows unprivileged local users to initiate a root shell on affected systems. The researchers shared the exploit privately with the Linux kernel team, aiding in the development of a fix and providing a detailed description of the employed exploitation techniques and the PoC\u2019s source code. \n\nThe researchers plan to make the exploit public on Monday, May 15th, 2023, along with comprehensive details about the exploitation techniques. Following the linux-distros list policy, the exploit must be published within seven days from the advisory. This forthcoming publication aims to increase awareness and facilitate timely remediation efforts.\nTrending: How to Exploit \u201cimproper error handling\u201d in Web Applications Trending: Malware Analysis Tool: retoolkit Linux Kernel Vulnerability Highlights the Value of Root-Level Privileges for Threat ActorsWhile CVE-2023-32233 requires remote attackers to establish local access to a target system before exploitation, the significance lies in the fact that gaining root-level privileges on Linux servers is a coveted asset for threat actors. These actors often monitor platforms like Openwall for new security information to exploit in their attacks.\nTrending: APT hacking group uses double DLL sideloading to bypass security Are u a security researcher? Or a company that writes articles or write ups about Cyb[...]", "creation_timestamp": "2026-09-04T15:00:05.528377Z"}