boxscore/security
CVE · referencelatest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2023-42753HIGH
Red Hat Red Hat Enterprise Linux 7 — Kernel: netfilter: potential slab-out-of-bound access due to integer underflow
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0051   41.7     —
AFFECTED
  Product                                                         Versions     Fixed
  Red Hat Enterprise Linux 7                                      unspecified  0:3.10.0-1160.108.1.rt56.1259.el7
  Red Hat Enterprise Linux 7                                      unspecified  0:3.10.0-1160.108.1.el7
  Red Hat Enterprise Linux 7                                      unspecified  —
  Red Hat Enterprise Linux 7.7 Advanced Update Support            unspecified  0:3.10.0-1062.85.1.el7
  Red Hat Enterprise Linux 8                                      unspecified  0:4.18.0-513.11.1.rt7.313.el8_9
  Red Hat Enterprise Linux 8                                      unspecified  —
  Red Hat Enterprise Linux 8                                      unspecified  0:4.18.0-513.11.1.el8_9
  Red Hat Enterprise Linux 8.2 Advanced Update Support            unspecified  0:4.18.0-193.120.1.el8_2
  Red Hat Enterprise Linux 8.2 Telecommunications Update Service  unspecified  0:4.18.0-193.120.1.rt13.171.el8_2
  Red Hat Enterprise Linux 8.2 Telecommunications Update Service  unspecified  0:4.18.0-193.120.1.el8_2
  + 23 more
TIMELINE
  Sep 13  Reserved by redhat
  Sep 25  Published (CNA: redhat)
  Aug 6   EXPLOIT PUBLISHED — CVE-2023-42753 (Red Hat Enterprise Linux 7). Public exploit reference added.
  Aug 6   RESCORED — CVE-2023-42753 (Red Hat Enterprise Linux 7). CVSS 7 → 7.8 (NVD).
CWE-787 · CNA: redhat · CVSS v3.1 · 32 references · NVD status: Modified

Description

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

Lifecycle

Complete event history — 4 events, chronological
DateEventDetail
September 13, 2023ReservedReserved by redhat
September 25, 2023PublishedPublished (CNA: redhat)
August 6, 2026EXPLOIT PUBLISHEDEXPLOIT PUBLISHED — CVE-2023-42753 (Red Hat Enterprise Linux 7). Public exploit reference added.
August 6, 2026RESCOREDRESCORED — CVE-2023-42753 (Red Hat Enterprise Linux 7). CVSS 7 → 7.8 (NVD).

Affected

Affected products and packages — 33 rows
VendorProduct / PackageEcosystemVersion introducedFixed
Red HatRed Hat Enterprise Linux 7——0:3.10.0-1160.108.1.rt56.1259.el7
Red HatRed Hat Enterprise Linux 7——0:3.10.0-1160.108.1.el7
Red HatRed Hat Enterprise Linux 7———
Red HatRed Hat Enterprise Linux 7.7 Advanced Update Support——0:3.10.0-1062.85.1.el7
Red HatRed Hat Enterprise Linux 8——0:4.18.0-513.11.1.rt7.313.el8_9
Red HatRed Hat Enterprise Linux 8———
Red HatRed Hat Enterprise Linux 8——0:4.18.0-513.11.1.el8_9
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support——0:4.18.0-193.120.1.el8_2
Red HatRed Hat Enterprise Linux 8.2 Telecommunications Update Service——0:4.18.0-193.120.1.rt13.171.el8_2
Red HatRed Hat Enterprise Linux 8.2 Telecommunications Update Service——0:4.18.0-193.120.1.el8_2
Red HatRed Hat Enterprise Linux 8.2 Update Services for SAP Solutions———
Red HatRed Hat Enterprise Linux 8.2 Update Services for SAP Solutions——0:4.18.0-193.120.1.el8_2
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support——0:4.18.0-305.120.1.el8_4
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service——0:4.18.0-305.120.1.rt7.196.el8_4
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service——0:4.18.0-305.120.1.el8_4
Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions——0:4.18.0-305.120.1.el8_4
Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions———
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support———
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support——0:4.18.0-372.87.1.el8_6
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support——0:4.18.0-477.36.1.el8_8
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support———
Red HatRed Hat Enterprise Linux 9——0:5.14.0-362.18.1.el9_3
Red HatRed Hat Enterprise Linux 9———
Red HatRed Hat Enterprise Linux 9——0:5.14.0-362.18.1.el9_3
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support——0:5.14.0-70.80.1.el9_0
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support——0:5.14.0-70.80.1.rt21.151.el9_0
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support———
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support——0:5.14.0-284.40.1.el9_2
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support——0:5.14.0-284.40.1.rt14.325.el9_2
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support———
Red HatRed Hat Virtualization 4 for Red Hat Enterprise Linux 8——0:4.18.0-372.87.1.el8_6
Red HatRed Hat Enterprise Linux 6———
Red HatRed Hat Enterprise Linux 9———

Weaknesses

CWE-787

References (32)

Related

Authoritative record: CVE-2023-42753 at cve.org

Vendors: red hat

Weaknesses: CWE-787

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2023-42753 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.