CVE-2023-52433

MEDIUM
Published Feb 20, 2024 Modified Mar 25, 2025 CWE-273

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction New elements in this transaction might expired before such transaction ends. Skip sync GC for such elements otherwise commit path might walk over an already released object. Once transaction is finished, async GC will collect such expired element.

Is your site exposed to CVE-2023-52433?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

4.4
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

CWE-273 CWE-273

Affected Products

Vendor Product
netapp ontap_tools
netapp ontap_tools
linux linux_kernel

References

Advisories & Patches

https://git.kernel.org/stable/c/03caf75da1059f0460666c826e9f50e13dfd0017 https://git.kernel.org/stable/c/2ee52ae94baabf7ee09cf2a8d854b990dac5d0e4 https://git.kernel.org/stable/c/9a8c544158f68f656d1734eb5ba00c4f817b76b1 https://git.kernel.org/stable/c/9af7dfb3c9d7985172a240f85e684c5cd33e29ce https://git.kernel.org/stable/c/9db9feb841f7449772f9393c16b9ef4536d8c127 https://git.kernel.org/stable/c/c323ed65f66e5387ee0a73452118d49f1dae81b8 https://git.kernel.org/stable/c/e3213ff99a355cda811b41e8dbb3472d13167a3a https://git.kernel.org/stable/c/03caf75da1059f0460666c826e9f50e13dfd0017 https://git.kernel.org/stable/c/2ee52ae94baabf7ee09cf2a8d854b990dac5d0e4 https://git.kernel.org/stable/c/9a8c544158f68f656d1734eb5ba00c4f817b76b1 https://git.kernel.org/stable/c/9af7dfb3c9d7985172a240f85e684c5cd33e29ce https://git.kernel.org/stable/c/9db9feb841f7449772f9393c16b9ef4536d8c127 https://git.kernel.org/stable/c/c323ed65f66e5387ee0a73452118d49f1dae81b8 https://git.kernel.org/stable/c/e3213ff99a355cda811b41e8dbb3472d13167a3a

Frequently Asked Questions

What is CVE-2023-52433? +
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction New elements in this transaction might expired before such transaction ends. Skip sync GC for such elements otherwise commit path might walk over an already released object. Once transaction is finished, async GC will collect such expired element. It has a CVSS v3.1 base score of 4.4 (MEDIUM).
How severe is CVE-2023-52433? +
CVE-2023-52433 has a CVSS v3.1 score of 4.4 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.
What products are affected by CVE-2023-52433? +
CVE-2023-52433 affects products from linux, netapp, specifically: linux_kernel, ontap_tools. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2023-52433? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-1003

A potential vulnerability has been identified in HP Anyware Agent for Linux which might allow for authentication bypass which may …
CVE-2026-32107 8.8

xrdp is an open source RDP server. In versions through 0.10.5, the session execution component did not properly handle an …
CVE-2025-27396 8.8

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit the …
CVE-2024-8382 8.8

Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content …
CVE-2023-34322 7.8

For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in …
CVE-2026-0099 7.8

In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2023-52433 — free, no signup required.