CVE-2023-42756

Опубликовано: 28 сент. 2023

Источник: nvd

CVSS3: 4.4

CVSS3: 4.7

EPSS Низкий

Описание

A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic due to the invocation of __ip_set_put on a wrong set. This issue may allow a local user to crash the system.

Ссылки

https://access.redhat.com/errata/RHSA-2024:2394
https://access.redhat.com/security/cve/CVE-2023-42756
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2239848
Exploit
Issue Tracking
Patch
Third Party Advisory
https://seclists.org/oss-sec/2023/q3/242
Exploit
Mailing List
Patch
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:2394
https://access.redhat.com/security/cve/CVE-2023-42756
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2239848
Exploit
Issue Tracking
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GISYSL3F6WIEVGHJGLC2MFNTUXHPTKQH/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GPMICQ2HVZO5UAM5KPXHAZKA2U3ZDOO6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V5PDNWPKAP3WL5RQZ4RIDS6MG32OHH5R/
https://seclists.org/oss-sec/2023/q3/242
Exploit
Mailing List
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 6.6 (исключая)

cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

EPSS

Процентиль: 0%

0.00007

Низкий

4.4 Medium

CVSS3

4.7 Medium

CVSS3

Дефекты

CWE-362

Связанные уязвимости

CVE-2023-42756

CVSS3: 4.4

ubuntu

около 2 лет назад

A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic due to the invocation of `__ip_set_put` on a wrong `set`. This issue may allow a local user to crash the system.

CVE-2023-42756

CVSS3: 4.4

redhat

около 2 лет назад

CVE-2023-42756

CVSS3: 4.7

msrc

около 2 лет назад

Kernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap

CVE-2023-42756

CVSS3: 4.4

debian

около 2 лет назад

A flaw was found in the Netfilter subsystem of the Linux kernel. A rac ...

GHSA-9fpq-xxr8-j37x

CVSS3: 4.4

github

около 2 лет назад

EPSS

Процентиль: 0%

0.00007

Низкий

4.4 Medium

CVSS3

4.7 Medium

CVSS3

Дефекты

CWE-362