CVE-2023-4569

A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a memory leak.

Score

CVSS 3.1 5.5 Medium

Status

Modified - secalert@redhat.com

Published

2023-08-28

Last modified

2025-02-27

Weaknesses

CWE-401, CWE-402

Affected products

• Debian Linux (Debian)
• Fedora (Fedora)
• Linux Kernel (Linux)
• Enterprise Linux (Redhat)

References

• https://access.redhat.com/security/cve/CVE-2023-4569
• https://bugzilla.redhat.com/show_bug.cgi?id=2235470
• https://patchwork.ozlabs.org/project/netfilter-devel/patch/20230812110526.49808-1-fw@strlen.de/
• https://www.debian.org/security/2023/dsa-5492