CVE-2023-54035: netfilter: nf_tables: fix underflow in chain reference counter
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftables: fix underflow in chain reference counter
Set element addition error path decrements reference counter on chains twice: once on element release and again via nftdatarelease().
Then, d6b478666ffa ("netfilter: nftables: fix underflow in object reference counter") incorrectly fixed this by removing the stateful object reference count decrement.
Restore the stateful object decrement as in b91d90368837 ("netfilter: nftables: fix leaking object reference count") and let nftdatarelease() decrement the chain reference counter, so this is done only once.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-54035?
CVE-2023-54035 is classified as a medium severity vulnerability in the Linux kernel.
What vulnerabilities are addressed by CVE-2023-54035?
CVE-2023-54035 addresses an underflow issue in the chain reference counter in the netfilter nf_tables module.
How do I fix CVE-2023-54035?
To fix CVE-2023-54035, you need to update the Linux kernel to the latest version that includes the patch for this vulnerability.
What versions of Linux kernel are affected by CVE-2023-54035?
CVE-2023-54035 affects various versions of the Linux kernel prior to the inclusion of the patch addressing this issue.
Is CVE-2023-54035 a remote or local vulnerability?
CVE-2023-54035 is primarily considered a local vulnerability that may allow a user to exploit it if they have sufficient permissions.