cbcvebase.
CVE-2023-42756
published 2023-09-28

CVE-2023-42756: A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic due to…

medium4.7CVSS 3.1
AVLACHPRLUINSUCNINAH
A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic due to the invocation of `__ip_set_put` on a wrong `set`. This issue may allow a local user to crash the system.

Affected

19 ranges
VendorProductVersion rangeFixed in
debiandebian_linux
debianlinux< linux 6.1.55-1 (bookworm)linux 6.1.55-1 (bookworm)
fedoraprojectfedora
fedoraprojectfedora
fedoraprojectfedora
linuxlinux_kernel< 6.66.6
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.197-15.10.197-1
linuxlinux_kernel>= 0 < 6.1.55-16.1.55-1
linuxlinux_kernel>= 0 < 6.5.6-16.5.6-1
linuxlinux_kernel>= 0 < 6.5.6-16.5.6-1
linuxlinux_kernel>= 0 < 5.4.0-165.1825.4.0-165.182
linuxlinux_kernel>= 0 < 5.15.0-87.975.15.0-87.97
linuxlinux_kernel>= 0 < 6.5.0-10.106.5.0-10.10
msrccbl2_kernel_5.15.135.1-2_on_cbl_mariner_2.0
redhatenterprise_linux
ubuntulinux-gcp-5.15
ubuntulinux-gkeop-5.15
ubuntulinux-intel-iotg-5.15

CVSS provenance

nvdv3.14.7MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
osv7.8HIGH