CVE-2023-53701 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Kernel
Severity
5.5MEDIUM
No vectorEPSS
No EPSS data
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 22
Description
kernel: Kernel: Denial of Service in Netfilter's nf_tables component
A vulnerability was identified in the Linux kernel’s netfilter nf_tables subsystem that could lead to wild memory access under specific conditions. When deleting elements from an anonymous set already removed in the same transaction during nftables operations, internal state handling did not properly deactivate the set, leading to a potential write of invalid memory. On systems with Kernel Address Sanitizer (KASAN) enabled or …
Affected Packages2 packages
🔴Vulnerability Details
3GHSA▶
GHSA-6474-wrgg-8qcw: In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: deactivate anonymous set from preparation phase
[ backport↗2025-10-22
OSV▶
CVE-2023-53701: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: deactivate anonymous set from preparation phase [ backport f↗2025-10-22