CVE-2023-35001

Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace

• CWE-787
• CWE-787

• http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.htmlThird Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.htmlThird Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2023/07/05/3Mailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/08/msg00001.htmlPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGZC5XOANA75OJ4XARBBXYSLDKUIJI5E/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPHI46ROSSLVAV4R5LJWJYU747JGOS6D/Mailing List
• https://lore.kernel.org/netfilter-devel/20230705121515.747251-1-cascardo@canonical.com/T/Patch, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20230824-0007/Third Party Advisory, VDB Entry
• https://www.debian.org/security/2023/dsa-5453Third Party Advisory
• https://www.openwall.com/lists/oss-security/2023/07/05/3Mailing List
• http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.htmlThird Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.htmlThird Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2023/07/05/3Mailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/08/msg00001.htmlPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGZC5XOANA75OJ4XARBBXYSLDKUIJI5E/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPHI46ROSSLVAV4R5LJWJYU747JGOS6D/Mailing List
• https://lore.kernel.org/netfilter-devel/20230705121515.747251-1-cascardo@canonical.com/T/Patch, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20230824-0007/Third Party Advisory, VDB Entry
• https://www.debian.org/security/2023/dsa-5453Third Party Advisory
• https://www.openwall.com/lists/oss-security/2023/07/05/3Mailing List

Published

Jul 5, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-34994An improper resource allocation vulnerability exists in the …4.3
• CVE-2023-34995 There are no requirements for setting a compl…9.8
• CVE-2023-34997Insecure inherited permissions in the installer for some Int…7.8
• CVE-2023-34998An authentication bypass vulnerability exists in the OAS Eng…8.1
• CVE-2023-34999A command injection vulnerability exists in RTS VLink Virtua…7.2
• CVE-2023-3500An issue has been discovered in GitLab CE/EE affecting all v…6.1
• CVE-2023-35002A heap-based buffer overflow vulnerability exists in the pic…9.8
• CVE-2023-35003Path transversal in some Intel(R) VROC software before versi…7.8
• CVE-2023-35004An integer overflow vulnerability exists in the VZT longest_…7.8
• CVE-2023-35005In Apache Airflow, some potentially sensitive values were be…6.5
• CVE-2023-35006IBM Security QRadar EDR 3.12 is vulnerable to HTML injection…5.4
• CVE-2023-35009IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow …5.3