CVE-2023-53635

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter conntrack component where the timeout value of an unconfirmed conntrack is handled incorrectly. When setting the timeout via the ctnetlink change timeout() function, the nfct time stamp is erroneously added to ct->timeout twice. Conversely, when retrieving the timeout via the ctnetlink dump timeout() function, the nfct time stamp is wrongly subtracted. This occurs because (struct nf conn)->timeout serves as an interval before confirmation and becomes a timestamp after confirmation. The issue has been present since the introduction of nfnetlink queue conntrack support.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.