CVE-2023-52433

2024-02-2013:15:08

416baaa9-dc9f-4396-8d5f-8c081fb06d67

web.nvd.nist.gov

3306

netfilter

nft_set_rbtree

sync gc

transaction

async gc

cve-2023-52433

security

nvd

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%

JSON

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction

New elements in this transaction might expired before such transaction
ends. Skip sync GC for such elements otherwise commit path might walk
over an already released object. Once transaction is finished, async GC
will collect such expired element.

Affected configurations

Vulners

Node

linuxlinux_kernelRange6.5–6.5.4

linuxlinux_kernelRange6.6.0≥

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/netfilter/nft_set_rbtree.c"
    ],
    "versions": [
      {
        "version": "cb4d00b56367",
        "lessThan": "9db9feb841f7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "c357648929c8",
        "lessThan": "03caf75da105",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "146c76866795",
        "lessThan": "c323ed65f66e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "479a2cf52593",
        "lessThan": "9af7dfb3c9d7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "df650d6a4bf4",
        "lessThan": "9a8c544158f6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "f6c383b8c31a",
        "lessThan": "e3213ff99a35",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "f6c383b8c31a",
        "lessThan": "2ee52ae94baa",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/netfilter/nft_set_rbtree.c"
    ],
    "versions": [
      {
        "version": "6.5",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.5",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.5.4",
        "lessThanOrEqual": "6.5.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]