CVE-2023-52999

A use-after-free vulnerability was found in the Linux kernel in the ops_init() function, where improper error handling can result in an out-of-bounds error. This issue occurs if the function net_assign_generic() fails and the error-handling code attempts to clean up a pointer that was never properly initialized.

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation requires a local attacker to trigger an error condition during network namespace operations registration. Although an out-of-bounds write could result in kernel memory corruption or a system crash, inducing the requisite allocation failure demands complex conditions and rare resource exhaustion. As a result, deterministic exploitation by an unprivileged local user is significantly restricted.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.