CVE-2023-54035

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel’s netfilter component related to the nf tables subsystem. A flaw in the chain reference counter handling can lead to an underflow. Specifically, an error path during set element addition incorrectly decrements the reference counter on chains twice. A previous fix attempted to address this but introduced an incorrect removal of the stateful object reference count decrement. The issue is resolved by restoring the stateful object decrement and ensuring the chain reference counter is decremented only once via nft data release().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.