Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2023-52433
HistoryFeb 20, 2024 - 1:15 p.m.

CVE-2023-52433

2024-02-2013:15:08
Debian Security Bug Tracker
security-tracker.debian.org
6
linux kernel
vulnerability
cve-2023-52433
netfilter
nft_set_rbtree
sync gc
transaction
expiration
unix

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction New elements in this transaction might expired before such transaction ends. Skip sync GC for such elements otherwise commit path might walk over an already released object. Once transaction is finished, async GC will collect such expired element.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%