CVE-2023-4881

A stack based out-of-bounds write flaw was found in the netfilter subsystem in the Linux kernel. If the expression length is a multiple of 4 (register size), the nft_exthdr_eval family of functions writes 4 NULL bytes past the end of the regs argument, leading to stack corruption and potential information disclosure or a denial of service.

CVE-2023-4881 was initially assigned to a bug that was then deemed to be a non-security issue by the Linux kernel security team.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.