CVE-2023-52433CWE-273

CVE-2023-52433

High · published February 20, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
17.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction

New elements in this transaction might expired before such transaction

ends. Skip sync GC for such elements otherwise commit path might walk

over an already released object. Once transaction is finished, async GC

will collect such expired element.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00262 · 17.0th percentile
Weakness
CWE-273 · Improper Check for Dropped Privileges
Published
2024-02-20T18:15Z
Affected products (3)
ProductVersionsFixed in
netapp/ontap_toolsall versions—
netapp/ontap_toolsall versions—
linux/linux_kernel≥ 6.5, < 6.5.46.5.4
References (15)
https://git.kernel.org/stable/c/03caf75da1059f0460666c826e9f50e13dfd0017 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2ee52ae94baabf7ee09cf2a8d854b990dac5d0e4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9a8c544158f68f656d1734eb5ba00c4f817b76b1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9af7dfb3c9d7985172a240f85e684c5cd33e29ce · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9db9feb841f7449772f9393c16b9ef4536d8c127 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c323ed65f66e5387ee0a73452118d49f1dae81b8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e3213ff99a355cda811b41e8dbb3472d13167a3a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/03caf75da1059f0460666c826e9f50e13dfd0017 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/2ee52ae94baabf7ee09cf2a8d854b990dac5d0e4 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/9a8c544158f68f656d1734eb5ba00c4f817b76b1 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/9af7dfb3c9d7985172a240f85e684c5cd33e29ce · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/9db9feb841f7449772f9393c16b9ef4536d8c127 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/c323ed65f66e5387ee0a73452118d49f1dae81b8 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/e3213ff99a355cda811b41e8dbb3472d13167a3a · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20240828-0003/ · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 20 FEB 12:52Z
    netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
    cvelistv5