https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 06:31:56 +0000 https://vulnerability.circl.lu/vuln/cve-2023-53304 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: nft_set_rbtree: fix overlap expiration walk</p> <p>The lazy gc on insert that should remove timed-out entries fails to release the other half of the interval, if any.</p> <p>Can be reproduced with tests/shell/testcases/sets/0044interval_overlap_0 in nftables.git and kmemleak enabled kernel.</p> <p>Second bug is the use of rbe_prev vs. prev pointer. If rbe_prev() returns NULL after at least one iteration, rbe_prev points to element that is not an end interval, hence it should not be removed.</p> <p>Lastly, check the genmask of the end interval if this is active in the current generation.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: nft_set_rbtree: fix overlap expiration walk</p> <p>The lazy gc on insert that should remove timed-out entries fails to release the other half of the interval, if any.</p> <p>Can be reproduced with tests/shell/testcases/sets/0044interval_overlap_0 in nftables.git and kmemleak enabled kernel.</p> <p>Second bug is the use of rbe_prev vs. prev pointer. If rbe_prev() returns NULL after at least one iteration, rbe_prev points to element that is not an end interval, hence it should not be removed.</p> <p>Lastly, check the genmask of the end interval if this is active in the current generation.</p> https://vulnerability.circl.lu/vuln/cve-2023-53304