CVE-2023-52927

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52927
In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nf_ct_find_expectation Currently nf_conntrack_in() calling nf_ct_find_expectation() will remove the exp from the hash table. However, in some scenario, we expect the exp not to be removed when the created ct will not be confirmed, like in OVS and TC conntrack in the following patches. This patch allows exp not to be removed by setting IPS_CONFIRMED in the status of the tmpl.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3fa58a6fbd1e9e5682d09cdafb08fba004cb12ec Broken Link
https://git.kernel.org/stable/c/4914109a8e1e494c6aa9852f9e84ec77a5fc643f Broken Link
https://seadragnol.github.io/posts/CVE-2023-52927/
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

19 Aug 2025, 17:15

Type Values Removed Values Added
References
  • () https://seadragnol.github.io/posts/CVE-2023-52927/ -

17 Jul 2025, 16:18

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: netfilter: permite que exp no se elimine en nf_ct_find_expectation. Actualmente, nf_conntrack_in(), que llama a nf_ct_find_expectation(), elimina la exp de la tabla hash. Sin embargo, en algunos casos, esperamos que la exp no se elimine cuando el ct creado no se confirme, como en OVS y TC conntrack en los parches posteriores. Este parche permite que exp no se elimine estableciendo IPS_CONFIRMED en el estado del tmpl.
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/3fa58a6fbd1e9e5682d09cdafb08fba004cb12ec - () https://git.kernel.org/stable/c/3fa58a6fbd1e9e5682d09cdafb08fba004cb12ec - Broken Link
References () https://git.kernel.org/stable/c/4914109a8e1e494c6aa9852f9e84ec77a5fc643f - () https://git.kernel.org/stable/c/4914109a8e1e494c6aa9852f9e84ec77a5fc643f - Broken Link
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

14 Mar 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-14 15:15

Updated : 2025-08-19 17:15

NVD link : CVE-2023-52927

Mitre link : CVE-2023-52927

CVE.ORG link : CVE-2023-52927

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo