CVE-2023-53492

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0

Description A flaw exists in the Linux kernel's netfilter module, specifically within the nf tables subsystem. The issue arises because the nft chain lookup byid function does not properly consider the genmask when searching for a chain by its ID. This can lead to a situation where a rule is added to a chain that has already been deleted, resulting in a warning message and potential instability. The issue occurs when adding a rule to a chain referencing its ID, if that chain was deleted in the same batch.

Recommendations Update to version 6.4.0 or later to address this issue.