CVE-2023-4004

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.94% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 58.5% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2023-07-31 16:22Z3 YR AGO

Last updated

2025-11-08 03:13Z10 MO AGO

Reserved

2023-07-30

Assigning CNA

redhat

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

• CWE-416Use After FreeVariant

Data version

5.2

Document digest

ee89de34957f08b340825548fc2d563ab12a9e98003703e0545be92c2c639a80

• access.redhat.comRHSA-2023:4961https://access.redhat.com/errata/RHSA-2023:4961vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2023:4962https://access.redhat.com/errata/RHSA-2023:4962vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2023:4967https://access.redhat.com/errata/RHSA-2023:4967vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2023:5069https://access.redhat.com/errata/RHSA-2023:5069vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2023:5091https://access.redhat.com/errata/RHSA-2023:5091vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2023:5093https://access.redhat.com/errata/RHSA-2023:5093vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2023:5221https://access.redhat.com/errata/RHSA-2023:5221vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2023:5244https://access.redhat.com/errata/RHSA-2023:5244vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2023:5255https://access.redhat.com/errata/RHSA-2023:5255vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2023:5548https://access.redhat.com/errata/RHSA-2023:5548vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2023:5627https://access.redhat.com/errata/RHSA-2023:5627vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2023:7382https://access.redhat.com/errata/RHSA-2023:7382vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2023:7389https://access.redhat.com/errata/RHSA-2023:7389vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2023:7411https://access.redhat.com/errata/RHSA-2023:7411vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2023:7417https://access.redhat.com/errata/RHSA-2023:7417vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2023:7431https://access.redhat.com/errata/RHSA-2023:7431vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2023:7434https://access.redhat.com/errata/RHSA-2023:7434vendor-advisoryx_refsource_REDHAT
• access.redhat.comhttps://access.redhat.com/security/cve/CVE-2023-4004vdb-entryx_refsource_REDHAT
• bugzilla.redhat.comRHBZ#2225275https://bugzilla.redhat.com/show_bug.cgi?id=2225275issue-trackingx_refsource_REDHAT
• patchwork.ozlabs.orghttps://patchwork.ozlabs.org/project/netfilter-devel/patch/20230719190824.21196-1-fw@strlen.de/
• packetstormsecurity.comhttp://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html
• packetstormsecurity.comhttp://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html
• lists.debian.orghttps://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
• security.netapp.comhttps://security.netapp.com/advisory/ntap-20231027-0001/
• www.debian.orghttps://www.debian.org/security/2023/dsa-5480
• www.debian.orghttps://www.debian.org/security/2023/dsa-5492