CVE-2023-42756

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation Due to a race condition between nf_tables netlink control plane transaction and nft_set element garbage collection, it is possible to underflow the reference counter causing a use-after-free vulnerability We r ...

Description<!---->A flaw was found in the Netfilter subsystem of the Linux kernel A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic due to the invocation of `__ip_set_put` on a wrong `set` This issue may allow a local user to crash the systemA flaw was found in the Netfilter subsystem of the Linux kernel A rac ...