Log in Start free

Vulnerability · Published Sep 16, 2025 · Assigned by Linux

CVE-2023-53304netfilter: nft_set_rbtree: fix overlap expiration walk

Medium 5.5

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 94.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: fix overlap expiration walk The lazy gc on insert that should remove timed-out entries fails to release the other half of the interval, if any. Can be reproduced with tests/shell/testcases/sets/0044interval_overlap_0 in nftables.git and kmemleak enabled kernel. Second bug is the use of rbe_prev vs. prev pointer. If rbe_prev() returns NULL after at least one iteration, rbe_prev points to element that is not an end interval, hence it should not be removed. Lastly, check the genmask of the end interval if this is active in the current generation.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.52-1DEBIAN-CVE-2023-53304
Debian:13linux6.4.11-1DEBIAN-CVE-2023-53304
Debian:14linux6.4.11-1DEBIAN-CVE-2023-53304
Ubuntu:22.04:LTSlinux5.15.0-87.97UBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-aws5.15.0-1048.53UBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-azure5.15.0-1050.57UBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-53304
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1050.57.1UBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-gcp5.15.0-1045.53UBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-53304
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-gke5.15.0-1045.50UBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1031.37UBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-53304
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-ibm5.15.0-1041.44UBUNTU-CVE-2023-53304
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1043.49UBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-kvm5.15.0-1045.50UBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-87.96UBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-53304
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1039.39UBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1019.19UBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1006.6UBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-53304
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2023-53304
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-oracle5.15.0-1046.52UBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-raspi5.15.0-1041.44UBUNTU-CVE-2023-53304
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53304
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53304
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2023-53304
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1025.29UBUNTU-CVE-2023-53304

Affected products (as reported)

VendorProductVersions
Linux Linux 7ab87a326f20c52ff4d9972052d085be951c704b – before 8284a79136c384059e85e278da2210b809730287181859bdfb9734aca449512fccaee4cacce64aed – before acaee227cf79c45a5d2d49c3e9a66333a462802c4aacf3d78424293e318c616016865380b37b9cc5 – before 893cb3c3513cf661a0ff45fe0cfa83fe27131f762bf1435fa19d2c58054391b3bba40d5510a5758c – before 50cbb9d195c197af671869c8cadce3bd483735a0318cb24a4c3fce8140afaf84e4d45fcb76fb280b – before 89a4d1a89751a0fbd520e64091873e19cc0979e8c9e6978e2725a7d4b6cd23b2facd3f11422c0643 – before cd66733932399475fe933cb3ec03e687ed401462c9e6978e2725a7d4b6cd23b2facd3f11422c0643 – before f718863aca469a109895cb855e6b81fff4827d715.10.166 – before 5.10.190
Linux Linux 6.2

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References