Log in Start free

Vulnerability · Published Feb 20, 2024 · Assigned by Linux

CVE-2023-52433netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 81.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction New elements in this transaction might expired before such transaction ends. Skip sync GC for such elements otherwise commit path might walk over an already released object. Once transaction is finished, async GC will collect such expired element.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:13linux6.5.6-1DEBIAN-CVE-2023-52433
Debian:14linux6.5.6-1DEBIAN-CVE-2023-52433
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-nvidia-6.56.5.0-1007.7UBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2023-52433
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-52433
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2023-52433

Affected products (as reported)

VendorProductVersions
Linux Linux cb4d00b563675ba8ff6ef94b077f58d816f68ba3 – before 9db9feb841f7449772f9393c16b9ef4536d8c127c357648929c8dff891502349769aafb8f0452bc2 – before 03caf75da1059f0460666c826e9f50e13dfd0017146c76866795553dbc19998f36718d7986ad302b – before c323ed65f66e5387ee0a73452118d49f1dae81b8479a2cf5259347d6a1f658b0f791d27a34908e91 – before 9af7dfb3c9d7985172a240f85e684c5cd33e29cedf650d6a4bf47248261b61ef6b174d7c54034d15 – before 9a8c544158f68f656d1734eb5ba00c4f817b76b1f6c383b8c31a93752a52697f8430a71dcbc46adf – before e3213ff99a355cda811b41e8dbb3472d13167a3af6c383b8c31a93752a52697f8430a71dcbc46adf – before 2ee52ae94baabf7ee09cf2a8d854b990dac5d0e4e4d71d6a9c7db93f7bf20c3a0f0659d63d7de681
Linux Linux 6.5

Weakness: CWE-273 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References