PT-2025-43102 · Git+2 · Kernel+1

Published 2025-10-22 · Updated 2025-10-22 · CVE-2023-53701

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14

Description The Linux kernel contains an issue within the netfilter module, specifically related to nf tables. The problem involves the improper deactivation of anonymous sets during the preparation phase. This can lead to a situation where users might attempt to update a set that has already been deleted within the same transaction. The issue manifests as a KASAN (Kernel Address Sanitizer) report indicating a wild-memory-access within the nf tables commit function. The KASAN report details a write of size 8 at an invalid memory address, triggered during a set element deletion for a bound anonymous set.

Recommendations Update the Linux kernel to a version after 4.14.

Related Identifiers

CVE-2023-53701

Affected Products

Kernel

Linux

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-53701 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53701 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53701 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53701 · Vendor Advisory
• https://git.kernel.org/stable/c/86572872505023e3bb461b271c2f25fdaa3dfcd7 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note