< Back

CVE-2023-52581

Updated on 02 Mar 2024

Severity

7.0 High severity

Details

CVSS score: 7.0
CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE ID: CWE-401 Missing Release of Memory after Effective Lifetime
Affected product
Affected component
Links: NIST CIRCL RHEL Ubuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: fix memleak when more than 255 elements expired

When more than 255 elements expired we’re supposed to switch to a new gc container structure.

This never happens: u8 type will wrap before reaching the boundary and nft_trans_gc_space() always returns true.

This means we recycle the initial gc container structure and lose track of the elements that came before.

While at it, don’t deref ‘gc’ after we’ve passed it to call_rcu.

Details

Affected product:: AlmaLinux 9.2 ESU , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , Oracle Linux 6 ELS , TuxCare 9.6 ESU
Affected packages:: kernel @ 2.6.32 (+8 more)

Fixes

Operating system / Project

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system	Status	Covered kernels
AlmaLinux 8	Will Not Fix	40 kernels 4.18.0-240.el8 4.18.0-240.15.1.el8_3 4.18.0-240.22.1.el8_3 4.18.0-305.el8 4.18.0-305.3.1.el8_4 4.18.0-305.7.1.el8_4 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-348.el8 4.18.0-348.2.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-348.12.2.el8_5 4.18.0-348.20.1.el8_5 4.18.0-348.20.1.el8.fscrypt 4.18.0-348.23.1.el8_5 4.18.0-372.9.1.el8 4.18.0-372.13.1.el8_6 4.18.0-372.19.1.el8_6 4.18.0-372.16.1.el8_6 4.18.0-372.26.1.el8_6 4.18.0-372.32.1.el8_6 4.18.0-425.3.1.el8 4.18.0-425.10.1.el8_7 4.18.0-425.13.1.el8_7 4.18.0-425.19.2.el8_7 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 4.18.0-477.15.1.el8_8 4.18.0-477.21.1.el8_8 4.18.0-477.27.1.el8_8 4.18.0-513.5.1.el8_9 4.18.0-513.9.1.el8_9 4.18.0-477.27.2.el8_8 4.18.0-513.11.1.el8_9 4.18.0-513.18.1.el8_9 4.18.0-513.24.1.el8_9 4.18.0-513.18.2.el8_9
AlmaLinux 9	Will Not Fix	19 kernels 5.14.0-162.6.1.el9_1 5.14.0-70.26.1.el9_0 5.14.0-70.30.1.el9_0 5.14.0-70.17.1.el9_0 5.14.0-70.22.1.el9_0 5.14.0-162.12.1.el9_1 5.14.0-162.18.1.el9_1 5.14.0-162.22.2.el9_1 5.14.0-162.23.1.el9_1 5.14.0-284.11.1.el9_2 5.14.0-284.18.1.el9_2 5.14.0-70.13.1.el9_0 5.14.0-284.25.1.el9_2 5.14.0-284.30.1.el9_2 5.14.0-362.8.1.el9_3 5.14.0-362.13.1.el9_3 5.14.0-362.18.1.el9_3 5.14.0-362.24.1.el9_3 5.14.0-362.24.2.el9_3
CentOS 8	Will Not Fix	33 kernels 4.18.0-80.1.2.el8_0 4.18.0-80.11.1.el8_0 4.18.0-80.4.2.el8_0 4.18.0-80.7.1.el8_0 4.18.0-80.7.2.el8_0 4.18.0-80.el8 4.18.0-80.11.2.el8_0 4.18.0-147.el8 4.18.0-147.0.3.el8_1 4.18.0-147.3.1.el8_1 4.18.0-147.5.1.el8_1 4.18.0-147.8.1.el8_1 4.18.0-193.1.2.el8_2 4.18.0-193.el8 4.18.0-193.6.3.el8_2 4.18.0-193.14.2.el8_2 4.18.0-193.19.1.el8_2 4.18.0-193.28.1.el8_2 4.18.0-240.1.1.el8_3 4.18.0-240.10.1.el8_3 4.18.0-240.15.1.el8_3 4.18.0-240.el8 4.18.0-240.22.1.el8_3 4.18.0-305.3.1.el8 4.18.0-305.12.1.el8_4 4.18.0-305.10.2.el8_4 4.18.0-305.7.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-348.el8 4.18.0-348.2.1.el8_5 4.18.0-348.7.1.el8_5
CloudLinux OS 7h	Will Not Fix	54 kernels 4.18.0-147.0.3.el7h.lve 4.18.0-147.0.3.el7h 4.18.0-147.3.1.el7h.lve.1 4.18.0-147.8.1.el7h.lve 4.18.0-80.7.2.el7h 4.18.0-147.8.1.el7h.lve.1 4.18.0-193.28.1.lve1.el7h 4.18.0-305.lve.el7h 4.18.0-305.7.1.lve.el7h 4.18.0-305.10.2.lve.el7h 4.18.0-305.10.2.2.lve.el7h 4.18.0-305.12.1.lve.el7h 4.18.0-305.17.1.lve.el7h 4.18.0-305.19.1.lve.el7h 4.18.0-348.7.1.lve.el7h 4.18.0-348.12.2.lve.el7h 4.18.0-348.lve.el7h 4.18.0-348.12.2.lve.1.el7h 4.18.0-348.12.2.lve.2.el7h 4.18.0-348.20.1.lve.el7h 4.18.0-348.20.1.lve.1.el7h 4.18.0-348.23.1.lve.el7h 4.18.0-372.9.1.lve.el7h 4.18.0-372.13.1.lve.el7h 4.18.0-372.16.1.lve.el7h 4.18.0-372.19.1.lve.el7h 4.18.0-372.26.1.lve.1.el7h 4.18.0-372.32.1.lve.el7h 4.18.0-425.3.1.lve.el7h 4.18.0-425.3.1.lve.1.el7h 4.18.0-425.3.1.lve.2.el7h 4.18.0-425.3.1.lve.3.el7h 4.18.0-425.10.1.lve.el7h 4.18.0-425.13.1.lve.el7h 4.18.0-425.19.2.lve.el7h 4.18.0-477.10.1.lve.1.el7h 4.18.0-477.13.1.lve.el7h 4.18.0-477.15.1.lve.1.el7h 4.18.0-477.21.1.lve.el7h 4.18.0-477.13.1.lve.1.el7h 4.18.0-477.27.1.lve.el7h 4.18.0-477.15.1.lve.2.el7h 4.18.0-477.21.1.lve.1.el7h 4.18.0-513.5.1.lve.el7h 4.18.0-477.27.2.lve.el7h 4.18.0-513.9.1.lve.el7h 4.18.0-513.11.1.lve.el7h 4.18.0-513.18.1.lve.el7h 4.18.0-513.11.1.lve.1.el7h 4.18.0-513.18.1.lve.2.el7h 4.18.0-513.18.1.lve.1.el7h 4.18.0-513.24.1.lve.el7h 4.18.0-513.24.1.lve.1.el7h 4.18.0-513.24.1.lve.2.el7h
CloudLinux OS 8	Will Not Fix	49 kernels 4.18.0-147.3.1.el8.lve.1 4.18.0-147.8.1.el8.lve 4.18.0-147.0.3.lve.el8 4.18.0-147.8.1.el8.lve.1 4.18.0-193.28.1.lve1.el8 4.18.0-305.lve.el8 4.18.0-305.7.1.lve.el8 4.18.0-305.10.2.lve.el8 4.18.0-305.10.2.2.lve.el8 4.18.0-305.12.1.lve.el8 4.18.0-305.17.1.lve.el8 4.18.0-305.19.1.lve.el8 4.18.0-348.lve.el8 4.18.0-348.7.1.lve.el8 4.18.0-348.12.2.lve.el8 4.18.0-348.20.1.lve.1.el8 4.18.0-348.20.1.lve.el8 4.18.0-348.23.1.lve.el8 4.18.0-372.9.1.1.lve.el8 4.18.0-372.16.1.lve.el8 4.18.0-372.9.1.lve.el8 4.18.0-372.19.1.lve.el8 4.18.0-372.13.1.lve.el8 4.18.0-372.26.1.lve.1.el8 4.18.0-372.32.1.lve.el8 4.18.0-425.3.1.lve.1.el8 4.18.0-425.3.1.lve.el8 4.18.0-425.3.1.lve.2.el8 4.18.0-425.3.1.lve.3.el8 4.18.0-425.10.1.lve.el8 4.18.0-425.13.1.lve.el8 4.18.0-425.19.2.lve.el8 4.18.0-477.10.1.lve.el8 4.18.0-477.13.1.lve.el8 4.18.0-477.15.1.lve.2.el8 4.18.0-477.13.1.lve.1.el8 4.18.0-477.21.1.lve.el8 4.18.0-477.21.1.lve.1.el8 4.18.0-477.27.1.lve.el8 4.18.0-477.27.2.lve.el8 4.18.0-513.5.1.lve.el8 4.18.0-513.9.1.lve.el8 4.18.0-513.11.1.lve.el8 4.18.0-513.18.1.lve.el8 4.18.0-513.18.1.lve.2.el8 4.18.0-513.18.1.lve.1.el8 4.18.0-513.24.1.lve.el8 4.18.0-513.24.1.lve.1.el8 4.18.0-513.24.1.lve.2.el8
Oracle Linux 8	Will Not Fix	64 kernels 4.18.0-147.el8 4.18.0-80.11.1.el8_0 4.18.0-80.4.2.el8_0 4.18.0-147.5.1.el8_1 4.18.0-80.11.2.el8_0 4.18.0-80.7.2.el8_0 4.18.0-80.7.1.el8_0 4.18.0-147.0.2.el8_1 4.18.0-80.1.2.el8_0 4.18.0-147.0.3.el8_1 4.18.0-147.3.1.el8_1 4.18.0-80.el8 4.18.0-147.8.1.el8_1 4.18.0-193.1.2.el8_2 4.18.0-193.el8 4.18.0-193.6.3.el8_2 4.18.0-193.13.2.el8_2 4.18.0-193.14.3.el8_2 4.18.0-193.19.1.el8_2 4.18.0-193.28.1.el8_2 4.18.0-240.el8 4.18.0-240.1.1.el8_3 4.18.0-240.8.1.el8_3 4.18.0-240.10.1.el8_3 4.18.0-240.15.1.el8_3 4.18.0-240.22.1.el8_3 4.18.0-305.el8 4.18.0-305.3.1.el8_4 4.18.0-305.7.1.el8_4 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-348.el8 4.18.0-348.2.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-348.12.2.el8_5 4.18.0-348.20.1.el8_5 4.18.0-348.23.1.el8_5 4.18.0-372.9.1.el8 4.18.0-372.13.1.0.1.el8_6 4.18.0-372.16.1.0.1.el8_6 4.18.0-372.19.1.0.1.el8_6 4.18.0-372.26.1.0.1.el8_6 4.18.0-372.32.1.0.1.el8_6 4.18.0-425.3.1.el8 4.18.0-425.10.1.el8_7 4.18.0-425.13.1.el8_7 4.18.0-425.19.2.el8_7 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 4.18.0-477.15.1.el8_8 4.18.0-477.21.1.el8_8 4.18.0-477.27.0.1.el8_8 4.18.0-477.27.1.el8_8 4.18.0-513.5.1.el8_9 4.18.0-513.9.1.el8_9 4.18.0-513.11.0.1.el8_9 4.18.0-513.18.0.1.el8_9 4.18.0-513.18.0.2.el8_9 4.18.0-513.18.1.el8_9 4.18.0-513.18.1.0.1.el8_9 4.18.0-513.24.1.el8_9
Oracle Linux 9	Will Not Fix	25 kernels 5.14.0-70.13.1.0.3.el9_0 5.14.0-70.17.1.0.1.el9_0 5.14.0-70.22.1.0.1.el9_0 5.14.0-70.26.1.0.1.el9_0 5.14.0-162.6.1.el9_1 5.14.0-284.11.1.el9_2 5.14.0-162.23.1.el9_1 5.14.0-162.22.2.el9_1 5.14.0-162.18.1.el9_1 5.14.0-162.12.1.el9_1 5.14.0-70.30.1.0.1.el9_0 5.14.0-284.18.1.el9_2 5.14.0-284.25.1.el9_2 5.14.0-284.25.1.0.1.el9_2 5.14.0-284.30.0.1.el9_2 5.14.0-284.30.1.el9_2 5.14.0-362.8.1.el9_3 5.14.0-362.13.0.1.el9_3 5.14.0-362.13.1.el9_3 5.14.0-362.18.0.1.el9_3 5.14.0-362.18.0.2.el9_3 5.14.0-362.18.1.el9_3 5.14.0-362.24.1.el9_3 5.14.0-362.24.1.0.1.el9_3 5.14.0-362.24.1.0.2.el9_3
RHEL 8	Will Not Fix	61 kernels 4.18.0-147.el8 4.18.0-80.11.1.el8_0 4.18.0-80.4.2.el8_0 4.18.0-80.11.2.el8_0 4.18.0-80.7.2.el8_0 4.18.0-80.7.1.el8_0 4.18.0-147.0.2.el8_1 4.18.0-80.1.2.el8_0 4.18.0-147.0.3.el8_1 4.18.0-80.el8 4.18.0-147.5.1.el8_1 4.18.0-147.3.1.el8_1 4.18.0-147.8.1.el8_1 4.18.0-193.el8 4.18.0-193.1.2.el8_2 4.18.0-193.6.3.el8_2 4.18.0-193.13.2.el8_2 4.18.0-193.14.3.el8_2 4.18.0-193.19.1.el8_2 4.18.0-193.28.1.el8_2 4.18.0-240.el8 4.18.0-240.1.1.el8_3 4.18.0-240.8.1.el8_3 4.18.0-240.10.1.el8_3 4.18.0-240.15.1.el8_3 4.18.0-240.22.1.el8_3 4.18.0-305.el8 4.18.0-304.el8 4.18.0-305.3.1.el8_4 4.18.0-305.7.1.el8_4 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-348.el8 4.18.0-348.2.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-348.12.2.el8_5 4.18.0-348.20.1.el8_5 4.18.0-372.9.1.el8 4.18.0-348.23.1.el8_5 4.18.0-372.13.1.el8_6 4.18.0-372.16.1.el8_6 4.18.0-372.19.1.el8_6 4.18.0-372.26.1.el8_6 4.18.0-372.32.1.el8_6 4.18.0-425.3.1.el8 4.18.0-425.10.1.el8_7 4.18.0-425.13.1.el8_7 4.18.0-425.19.2.el8_7 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 4.18.0-477.15.1.el8_8 4.18.0-477.21.1.el8_8 4.18.0-477.27.1.el8_8 4.18.0-513.5.1.el8_9 4.18.0-513.9.1.el8_9 4.18.0-513.11.1.el8_9 4.18.0-513.18.1.el8_9 4.18.0-513.24.1.el8_9
RHEL 9	Will Not Fix	19 kernels 5.14.0-70.17.1.el9_0 5.14.0-70.22.1.el9_0 5.14.0-70.5.1.el9_0 5.14.0-70.13.1.el9_0 5.14.0-70.26.1.el9_0 5.14.0-70.30.1.el9_0 5.14.0-162.6.1.el9_1 5.14.0-162.12.1.el9_1 5.14.0-162.18.1.el9_1 5.14.0-162.22.2.el9_1 5.14.0-162.23.1.el9_1 5.14.0-284.11.1.el9_2 5.14.0-284.18.1.el9_2 5.14.0-284.25.1.el9_2 5.14.0-284.30.1.el9_2 5.14.0-362.8.1.el9_3 5.14.0-362.13.1.el9_3 5.14.0-362.18.1.el9_3 5.14.0-362.24.1.el9_3
Rocky Linux 8	Will Not Fix	34 kernels 4.18.0-305.3.1.el8_4 4.18.0-305.7.1.el8_4 4.18.0-305.10.2.el8_4 4.18.0-305.12.1.el8_4 4.18.0-305.17.1.el8_4 4.18.0-305.19.1.el8_4 4.18.0-305.25.1.el8_4 4.18.0-348.2.1.el8_5 4.18.0-348.12.2.el8_5 4.18.0-348.20.1.el8_5 4.18.0-348.7.1.el8_5 4.18.0-348.23.1.el8_5 4.18.0-372.9.1.el8 4.18.0-372.13.1.el8_6 4.18.0-372.19.1.el8_6 4.18.0-372.16.1.el8_6 4.18.0-372.16.1.el8_6.0.1 4.18.0-372.26.1.el8_6 4.18.0-372.32.1.el8_6 4.18.0-425.3.1.el8 4.18.0-425.10.1.el8_7 4.18.0-425.13.1.el8_7 4.18.0-425.19.2.el8_7 4.18.0-477.10.1.el8_8 4.18.0-477.13.1.el8_8 4.18.0-477.15.1.el8_8 4.18.0-477.27.1.el8_8 4.18.0-477.21.1.el8_8 4.18.0-513.5.1.el8_9 4.18.0-513.9.1.el8_9 4.18.0-513.11.1.el8_9 4.18.0-513.18.1.el8_9 4.18.0-513.11.1.el8_9.0.1 4.18.0-513.24.1.el8_9
Rocky Linux 9	Will Not Fix	18 kernels 5.14.0-162.6.1.el9_1 5.14.0-70.26.1.el9_0 5.14.0-70.30.1.el9_0 5.14.0-70.22.1.el9_0 5.14.0-162.6.1.el9_1.0.1 5.14.0-162.18.1.el9_1 5.14.0-162.12.1.el9_1.0.1 5.14.0-162.12.1.el9_1.0.2 5.14.0-162.22.2.el9_1 5.14.0-162.23.1.el9_1 5.14.0-284.30.1.el9_2 5.14.0-362.8.1.el9_3 5.14.0-362.13.1.el9_3 5.14.0-362.18.1.el9_3 5.14.0-362.24.1.el9_3 5.14.0-362.18.1.el9_3.0.1 5.14.0-362.24.1.el9_3.0.1 5.14.0-284.11.1.el9_2
Ubuntu 22.04	Planned	—
Ubuntu 22.04 AWS	Planned	—
Ubuntu 22.04 Azure	Will Not Fix	—

Release info

Copy page link

Open as a page

Advisory

CLSA-2025:1748945064

Operating system

CentOS 8.4 ELS

Published date

Nov 16, 2014

Project

Linux

Version

2.11.0-1~ubuntu16.04.1+tuxcare.els12

How to fix

Update command:

apt-get update
apt-get --only-upgrade install ansible*

Changelog

Insufficiently Random Passwords Leakage
Debian/patches/CVE-2020-10729.patch: Fix caching of Jinja2 expressions to prevent caching dynamic results
CVE-2020-10729

Updated packages

ansible_2.5.1+dfsg-1ubuntu0.1+tuxcare.els6_all.deb

CVE-2023-52581

Severity

Details

Overview

About vulnerability

Details

Statement

Fixes

Statement

KernelCare state

Subscribe to updates

Unsubscribe

Contact us

Message Delivered!