CVE-2023-52923

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: adapt set backend to use GC transaction API

Use the GC transaction API to replace the old and buggy gc API and the busy mark approach.

No set elements are removed from async garbage collection anymore, instead the _DEAD bit is set on so the set element is not visible from lookup path anymore. Async GC enqueues transaction work that might be aborted and retried later.

rbtree and pipapo set backends does not set on the _DEAD bit from the sync GC path since this runs in control plane path where mutex is held. In this case, set elements are deactivated, removed and then released via RCU callback, sync GC never fails.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 9d0982927e79049675cb6c6c04a0ebb3dad5a434, < cb4d00b563675ba8ff6ef94b077f58d816f68ba3; >= 9d0982927e79049675cb6c6c04a0ebb3dad5a434, < c357648929c8dff891502349769aafb8f0452bc2; >= 9d0982927e79049675cb6c6c04a0ebb3dad5a434, < 146c76866795553dbc19998f36718d7986ad302b; >= 9d0982927e79049675cb6c6c04a0ebb3dad5a434, < 479a2cf5259347d6a1f658b0f791d27a34908e91; >= 9d0982927e79049675cb6c6c04a0ebb3dad5a434, < df650d6a4bf47248261b61ef6b174d7c54034d15; >= 9d0982927e79049675cb6c6c04a0ebb3dad5a434, < e4d71d6a9c7db93f7bf20c3a0f0659d63d7de681; >= 9d0982927e79049675cb6c6c04a0ebb3dad5a434, < f6c383b8c31a93752a52697f8430a71dcbc46adf
LinuxLinux4.1

References

Timeline

Published
Jan 20, 2025
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-529245.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't skip expired elements during walk There isCVE-2023-529255.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't fail inserts if duplicate has expired nftaCVE-2023-529267.8In the Linux kernel, the following vulnerability has been resolved: IORING_OP_READ did not correctly consume the provided buffer list when CVE-2023-529277.8In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nf_ct_find_expectation CurreCVE-2023-529285.5In the Linux kernel, the following vulnerability has been resolved: bpf: Skip invalid kfunc call in backtrack_insn The verifier skips invaCVE-2023-529295.5In the Linux kernel, the following vulnerability has been resolved: nvmem: core: fix cleanup after dev_set_name() If dev_set_name() fails,CVE-2023-52936.5A vulnerability, which was classified as critical, was found in ECshop 4.1.5. Affected is an unknown function of the file /admin/leancloud.pCVE-2023-529307.8In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential bit_17 double-free A userspace with multiple tCVE-2023-529317.8In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid potential vm use-after-free Adding the vm to the vm_xaCVE-2023-529325.5In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: add cond_resched() in get_swap_pages() The softlockup stiCVE-2023-529335.5In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix handling and sanity checking of xattr_ids count A SysbotCVE-2023-529344.7In the Linux kernel, the following vulnerability has been resolved: mm/MADV_COLLAPSE: catch !none !huge !bad pmd lookups In commit 3448839
CVE-2023-52923: Medium severity, CVSS 5.5 | Vulnix