CVE-2023-53566: netfilter: nft_set_rbtree: fix null deref on element insertion
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftsetrbtree: fix null deref on element insertion
There is no guarantee that rbprev() will not return NULL in nftrbtreegcelem():
general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] nftaddsetelem+0x14b0/0x2990 nftablesnewsetelem+0x528/0xb30
Furthermore, there is a possible use-after-free while iterating, 'node' can be free'd so we need to cache the next value to use.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53566?
CVE-2023-53566 has been classified as a general protection fault vulnerability within the Linux kernel.
How do I fix CVE-2023-53566?
To fix CVE-2023-53566, update the Linux kernel to the latest version that contains the security patch addressing this vulnerability.
What systems are affected by CVE-2023-53566?
CVE-2023-53566 affects systems running vulnerable versions of the Linux kernel that utilize netfilter.
What are the potential impacts of CVE-2023-53566?
Exploitation of CVE-2023-53566 may lead to a system crash or unexpected behavior due to a null dereference.
Is CVE-2023-53566 actively being exploited?
As of now, there is no public information indicating that CVE-2023-53566 is actively being exploited in the wild.