fkie_nvd - fkie_cve-2023-53304

FKIE_CVE-2023-53304

Vulnerability from fkie_nvd - Published: 2025-09-16 17:15 - Updated: 2025-12-01 21:58

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: fix overlap expiration walk The lazy gc on insert that should remove timed-out entries fails to release the other half of the interval, if any. Can be reproduced with tests/shell/testcases/sets/0044interval_overlap_0 in nftables.git and kmemleak enabled kernel. Second bug is the use of rbe_prev vs. prev pointer. If rbe_prev() returns NULL after at least one iteration, rbe_prev points to element that is not an end interval, hence it should not be removed. Lastly, check the genmask of the end interval if this is active in the current generation.

References

URL	Tags
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/50cbb9d195c197af671869c8cadce3bd483735a0	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/8284a79136c384059e85e278da2210b809730287	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/893cb3c3513cf661a0ff45fe0cfa83fe27131f76	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/89a4d1a89751a0fbd520e64091873e19cc0979e8	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/acaee227cf79c45a5d2d49c3e9a66333a462802c	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/cd66733932399475fe933cb3ec03e687ed401462	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/f718863aca469a109895cb855e6b81fff4827d71	Patch

Impacted products

Vendor	Product	Version
linux	linux_kernel	*
linux	linux_kernel	*
linux	linux_kernel	*
linux	linux_kernel	*
linux	linux_kernel	6.2
linux	linux_kernel	6.2
linux	linux_kernel	6.2
linux	linux_kernel	6.2
linux	linux_kernel	6.5
linux	linux_kernel	6.5
linux	linux_kernel	6.5

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D120E24C-92C4-42C2-BDBC-2DA33FB84683",
              "versionEndExcluding": "5.10.190",
              "versionStartIncluding": "5.10.166",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7C579EE5-29AE-450E-A284-D7401ABCD1D3",
              "versionEndExcluding": "5.15.124",
              "versionStartIncluding": "5.15.91",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BBB03740-07A5-4A80-A087-A4A2B6127646",
              "versionEndExcluding": "6.1.43",
              "versionStartIncluding": "6.1.9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "ED5C51C1-C86A-404D-A81F-10761E602032",
              "versionEndExcluding": "6.4.8",
              "versionStartIncluding": "6.2.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:-:*:*:*:*:*:*",
              "matchCriteriaId": "3ADCCCEE-143A-4B48-9B2A-0CB97BD385DE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*",
              "matchCriteriaId": "4AB8D555-648E-4F2F-98BD-3E7F45BD12A8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc7:*:*:*:*:*:*",
              "matchCriteriaId": "C64BDD9D-C663-4E75-AE06-356EDC392B82",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc8:*:*:*:*:*:*",
              "matchCriteriaId": "26544390-88E4-41CA-98BF-7BB1E9D4E243",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "0B3E6E4D-E24E-4630-B00C-8C9901C597B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*",
              "matchCriteriaId": "F5608371-157A-4318-8A2E-4104C3467EA1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_set_rbtree: fix overlap expiration walk\n\nThe lazy gc on insert that should remove timed-out entries fails to release\nthe other half of the interval, if any.\n\nCan be reproduced with tests/shell/testcases/sets/0044interval_overlap_0\nin nftables.git and kmemleak enabled kernel.\n\nSecond bug is the use of rbe_prev vs. prev pointer.\nIf rbe_prev() returns NULL after at least one iteration, rbe_prev points\nto element that is not an end interval, hence it should not be removed.\n\nLastly, check the genmask of the end interval if this is active in the\ncurrent generation."
    }
  ],
  "id": "CVE-2023-53304",
  "lastModified": "2025-12-01T21:58:59.480",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2025-09-16T17:15:35.240",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/50cbb9d195c197af671869c8cadce3bd483735a0"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/8284a79136c384059e85e278da2210b809730287"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/893cb3c3513cf661a0ff45fe0cfa83fe27131f76"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/89a4d1a89751a0fbd520e64091873e19cc0979e8"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/acaee227cf79c45a5d2d49c3e9a66333a462802c"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/cd66733932399475fe933cb3ec03e687ed401462"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/f718863aca469a109895cb855e6b81fff4827d71"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2023-53304 (GCVE-0-2023-53304)

Vulnerability from cvelistv5 – Published: 2025-09-16 16:11 – Updated: 2025-09-16 16:11

Summary

Severity ?

No CVSS data available.

Assigner

Linux

References

URL

Tags

	https://git.kernel.org/stable/c/8284a79136c384059…
	https://git.kernel.org/stable/c/acaee227cf79c45a5…
	https://git.kernel.org/stable/c/893cb3c3513cf661a…
	https://git.kernel.org/stable/c/50cbb9d195c197af6…
	https://git.kernel.org/stable/c/89a4d1a89751a0fbd…
	https://git.kernel.org/stable/c/cd66733932399475f…
	https://git.kernel.org/stable/c/f718863aca469a109…

Impacted products

Vendor

Product

Version

Linux

Affected: 7ab87a326f20c52ff4d9972052d085be951c704b , < 8284a79136c384059e85e278da2210b809730287 (git)
Affected: 181859bdfb9734aca449512fccaee4cacce64aed , < acaee227cf79c45a5d2d49c3e9a66333a462802c (git)
Affected: 4aacf3d78424293e318c616016865380b37b9cc5 , < 893cb3c3513cf661a0ff45fe0cfa83fe27131f76 (git)
Affected: 2bf1435fa19d2c58054391b3bba40d5510a5758c , < 50cbb9d195c197af671869c8cadce3bd483735a0 (git)
Affected: 318cb24a4c3fce8140afaf84e4d45fcb76fb280b , < 89a4d1a89751a0fbd520e64091873e19cc0979e8 (git)
Affected: c9e6978e2725a7d4b6cd23b2facd3f11422c0643 , < cd66733932399475fe933cb3ec03e687ed401462 (git)
Affected: c9e6978e2725a7d4b6cd23b2facd3f11422c0643 , < f718863aca469a109895cb855e6b81fff4827d71 (git)

Linux

Affected: 6.2
Unaffected: 0 , < 6.2 (semver)
Unaffected: 5.10.190 , ≤ 5.10.* (semver)
Unaffected: 5.15.124 , ≤ 5.15.* (semver)
Unaffected: 6.1.43 , ≤ 6.1.* (semver)
Unaffected: 6.4.8 , ≤ 6.4.* (semver)
Unaffected: 6.5 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/netfilter/nft_set_rbtree.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "8284a79136c384059e85e278da2210b809730287",
              "status": "affected",
              "version": "7ab87a326f20c52ff4d9972052d085be951c704b",
              "versionType": "git"
            },
            {
              "lessThan": "acaee227cf79c45a5d2d49c3e9a66333a462802c",
              "status": "affected",
              "version": "181859bdfb9734aca449512fccaee4cacce64aed",
              "versionType": "git"
            },
            {
              "lessThan": "893cb3c3513cf661a0ff45fe0cfa83fe27131f76",
              "status": "affected",
              "version": "4aacf3d78424293e318c616016865380b37b9cc5",
              "versionType": "git"
            },
            {
              "lessThan": "50cbb9d195c197af671869c8cadce3bd483735a0",
              "status": "affected",
              "version": "2bf1435fa19d2c58054391b3bba40d5510a5758c",
              "versionType": "git"
            },
            {
              "lessThan": "89a4d1a89751a0fbd520e64091873e19cc0979e8",
              "status": "affected",
              "version": "318cb24a4c3fce8140afaf84e4d45fcb76fb280b",
              "versionType": "git"
            },
            {
              "lessThan": "cd66733932399475fe933cb3ec03e687ed401462",
              "status": "affected",
              "version": "c9e6978e2725a7d4b6cd23b2facd3f11422c0643",
              "versionType": "git"
            },
            {
              "lessThan": "f718863aca469a109895cb855e6b81fff4827d71",
              "status": "affected",
              "version": "c9e6978e2725a7d4b6cd23b2facd3f11422c0643",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/netfilter/nft_set_rbtree.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.2"
            },
            {
              "lessThan": "6.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.190",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.124",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.43",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.5",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.190",
                  "versionStartIncluding": "5.10.166",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.124",
                  "versionStartIncluding": "5.15.91",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.43",
                  "versionStartIncluding": "6.1.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.8",
                  "versionStartIncluding": "6.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5",
                  "versionStartIncluding": "6.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_set_rbtree: fix overlap expiration walk\n\nThe lazy gc on insert that should remove timed-out entries fails to release\nthe other half of the interval, if any.\n\nCan be reproduced with tests/shell/testcases/sets/0044interval_overlap_0\nin nftables.git and kmemleak enabled kernel.\n\nSecond bug is the use of rbe_prev vs. prev pointer.\nIf rbe_prev() returns NULL after at least one iteration, rbe_prev points\nto element that is not an end interval, hence it should not be removed.\n\nLastly, check the genmask of the end interval if this is active in the\ncurrent generation."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-16T16:11:44.147Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/8284a79136c384059e85e278da2210b809730287"
        },
        {
          "url": "https://git.kernel.org/stable/c/acaee227cf79c45a5d2d49c3e9a66333a462802c"
        },
        {
          "url": "https://git.kernel.org/stable/c/893cb3c3513cf661a0ff45fe0cfa83fe27131f76"
        },
        {
          "url": "https://git.kernel.org/stable/c/50cbb9d195c197af671869c8cadce3bd483735a0"
        },
        {
          "url": "https://git.kernel.org/stable/c/89a4d1a89751a0fbd520e64091873e19cc0979e8"
        },
        {
          "url": "https://git.kernel.org/stable/c/cd66733932399475fe933cb3ec03e687ed401462"
        },
        {
          "url": "https://git.kernel.org/stable/c/f718863aca469a109895cb855e6b81fff4827d71"
        }
      ],
      "title": "netfilter: nft_set_rbtree: fix overlap expiration walk",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53304",
    "datePublished": "2025-09-16T16:11:44.147Z",
    "dateReserved": "2025-09-16T08:09:37.994Z",
    "dateUpdated": "2025-09-16T16:11:44.147Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

FKIE_CVE-2023-53304

CVE-2023-53304 (GCVE-0-2023-53304)

Tags

Sightings

Nomenclature