CVE-2023-52433
netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
MEDIUM 4.4EPSS 0.3%
In the Linux kernel, the following vulnerability has been resolved:netfilter: nft_set_rbtree: skip sync GC for new elements in this transactionNew elements in this transaction might expired before such transactionends. Skip sync GC for such elements otherwise commit path might walkover an already released object. Once transaction is finished, async GCwill collect such expired element.
- Affected
- Linux
- CVSS v3.1 CNA
- 4.4 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - CVSS v3.1 CNA
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 0.26% chance of exploitation in the next 30 days, 17th percentile
- Published
- 2024-02-20
- Updated
- 2026-08-05
Exploit collections (1)
- linux/kernelctf/CVE-2023-52433_mitigationgoogle/security-research
Security advisories
- https://security.netapp.com/advisory/ntap-20240828-0003
- https://git.kernel.org/stable/c/03caf75da1059f0460666c826e9f50e13dfd0017
- https://git.kernel.org/stable/c/2ee52ae94baabf7ee09cf2a8d854b990dac5d0e4
- https://git.kernel.org/stable/c/9a8c544158f68f656d1734eb5ba00c4f817b76b1
- https://git.kernel.org/stable/c/9af7dfb3c9d7985172a240f85e684c5cd33e29ce
- https://git.kernel.org/stable/c/9db9feb841f7449772f9393c16b9ef4536d8c127
- https://git.kernel.org/stable/c/c323ed65f66e5387ee0a73452118d49f1dae81b8
- https://git.kernel.org/stable/c/e3213ff99a355cda811b41e8dbb3472d13167a3a