PT-2024-14661 · Linux+9 · Linux Kernel+9

Pablo Neira Ayuso · Published 2023-06-16 · Updated 2025-09-29 · CVE-2023-52620

Positive Technologies (AI Summary)

CVSS v3.1

2.5

Low

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the netfilter component of the Linux kernel, specifically the nf tables module. It involves disallowing timeout for anonymous sets, which are never used from userspace. The vulnerability may allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-99

Related Identifiers

ALSA-2024:2394

ALSA-2024:2950

ALSA-2024:3138

ALSA-2024_2394

ALSA-2025_16880

BDU:2025-01230

CESA-2024_2950

CESA-2024_3138

CVE-2023-52620

DLA-3840-1

DLA-3842-1

DSA-5658-1

DSA-5681-1

INFSA-2024_2394

INFSA-2024_2950

INFSA-2024_3138

LSN-0106-1

OESA-2024-1617

OESA-2024-1618

OESA-2024-1620

OESA-2024-1621

OESA-2024-1622

OESA-2024-1647

OPENSUSE-SU-2024_1644-1

OPENSUSE-SU-2024_1659-1

OPENSUSE-SU-2024_1663-1

RHSA-2024:2394

RHSA-2024:2950

RHSA-2024:3138

RHSA-2024_2394

RHSA-2024_2950

RHSA-2024_3138

RLSA-2024:2950

RLSA-2024:3138

SUSE-SU-2024:1643-1

SUSE-SU-2024:1644-1

SUSE-SU-2024:1646-1

SUSE-SU-2024:1659-1

SUSE-SU-2024:1663-1

SUSE-SU-2024:1870-1

USN-6820-1

USN-6820-2

USN-6821-1

USN-6821-2

USN-6821-3

USN-6821-4

USN-6828-1

USN-6871-1

USN-6892-1

USN-6896-1

USN-6896-2

USN-6896-3

USN-6896-4

USN-6896-5

USN-6919-1

USN-6926-1

USN-6926-2

USN-6926-3

USN-6938-1

Affected Products

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 1684

• 🔥 https://github.com/google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-52620_lts_cos_mitigation · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52620.json · Exploit
• https://ubuntu.com/security/CVE-2024-36006 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35900 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26973 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52699 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6896-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35958 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26875 · Security Note
• https://ubuntu.com/security/CVE-2023-52635 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36007 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26805 · Security Note
• https://ubuntu.com/security/CVE-2024-27077 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27074 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-26808 · Security Note