CVE-2023-53304: netfilter: nft_set_rbtree: fix overlap expiration walk
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftsetrbtree: fix overlap expiration walk
The lazy gc on insert that should remove timed-out entries fails to release the other half of the interval, if any.
Can be reproduced with tests/shell/testcases/sets/0044intervaloverlap0 in nftables.git and kmemleak enabled kernel.
Second bug is the use of rbeprev vs. prev pointer. If rbeprev() returns NULL after at least one iteration, rbeprev points to element that is not an end interval, hence it should not be removed.
Lastly, check the genmask of the end interval if this is active in the current generation.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53304?
CVE-2023-53304 is classified as a medium severity vulnerability due to potential denial of service conditions.
How do I fix CVE-2023-53304?
To fix CVE-2023-53304, update your Linux kernel to the latest stable version that includes the patch addressing this vulnerability.
What software is affected by CVE-2023-53304?
CVE-2023-53304 affects the Linux kernel, specifically involving the netfilter component.
What does CVE-2023-53304 exploit?
CVE-2023-53304 exploits an issue in the lazy garbage collection mechanism within the netfilter's rb-tree implementation.
Can CVE-2023-53304 lead to system instability?
Yes, CVE-2023-53304 may lead to system instability by causing unexpected failures in the netfilter component.