PT-2025-43102 · Git+2 · Kernel+1

Publicado 2025-10-22 · Atualizado 2025-10-22 · CVE-2023-53701

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14

Description The Linux kernel contains an issue within the netfilter module, specifically related to nf tables. The problem involves the improper deactivation of anonymous sets during the preparation phase. This can lead to a situation where users might attempt to update a set that has already been deleted within the same transaction. The issue manifests as a KASAN (Kernel Address Sanitizer) report indicating a wild-memory-access within the nf tables commit function. The KASAN report details a write of size 8 at an invalid memory address, triggered during a set element deletion for a bound anonymous set.

Recommendations Update the Linux kernel to a version after 4.14.

Identificadores relacionados

CVE-2023-53701

Produtos afetados

Kernel

Linux

Referências · 6

• https://git.kernel.org/stable/c/86572872505023e3bb461b271c2f25fdaa3dfcd7 · Nota
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-53701 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2023-53701 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53701 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-53701 · Aviso do Fabricante