Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-42756
HistorySep 28, 2023 - 12:00 a.m.

CVE-2023-42756

2023-09-2800:00:00
ubuntu.com
ubuntu.com
8
netfilter subsystem
linux kernel
race condition
ipset_cmd_add
ipset_cmd_swap
kernel panic
local user
system crash
denial of service
code execution

0.0004 Low

EPSS

Percentile

5.2%

A flaw was found in the Netfilter subsystem of the Linux kernel. A race
condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel
panic due to the invocation of __ip_set_put on a wrong set. This issue
may allow a local user to crash the system.

Bugs

Notes

Author Note
Priority reason: By using unprivileged user namespaces, this can be exploited to achieve denial of service or code execution.
Rows per page:
1-10 of 861

References