CVE-2023-52433

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the use of a resource after its expiration in the nft set rbtree() function of the Netfilter subsystem in the Linux kernel. This can lead to a denial of service. New elements in a transaction might expire before the transaction ends, and skipping sync GC for such elements prevents the commit path from walking over an already released object. Once the transaction is finished, async GC will collect the expired element.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.