CVEvulnerability

CVE-2023-52433

7.8 HIGH Published 2024-02-20 Modified 2026-08-04 Official page ↗
Status
Modified
Published
2024-02-20
Last modified
2026-08-04
Assigner
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS 3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-273

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction New elements in this transaction might expired before such transaction ends. Skip sync GC for such elements otherwise commit path might walk over an already released object. Once transaction is finished, async GC will collect such expired element.

Affected configurations

• netapp ontap tools 9 • netapp ontap tools 10 • linux linux kernel (>= 6.5 < 6.5.4)

Related

Weakness · CWE (1)

  • CWE-273 Improper Check for Dropped Privileges weakness

References