CVE-2023-32233: Use-after-free in Linux Netfilter nf_tables, undetected for 15 years

Short summary

GhostLock (CVE-2023-32233) is a use-after-free vulnerability in the Linux kernel's Netfilter subsystem that went undetected for over 15 years since kernel 2.6.19. Discovered by a Google security researcher, the flaw resides in how nf_tables handles error cleanup paths for stack-allocated data structures. The article explores the technical mechanism behind the UAF condition and its implications for kernel security practices.

• •CVE-2023-32233 is a UAF in Linux Netfilter's nf_tables, dormant for 15+ years
• •Vulnerability stems from improper cleanup of stack-allocated data on error paths
• •Discovery highlights challenges in kernel memory safety and static analysis

Generated with AI, which can make mistakes.