VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 4, 2025

netfilter: nft_set_rbtree: fix null deref on element insertion

CVE-2023-53566

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_rbtree: fix null deref on element insertion

There is no guarantee that rb_prev() will not return NULL in nft_rbtree_gc_elem():

general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] nft_add_set_elem+0x14b0/0x2990 nf_tables_newsetelem+0x528/0xb30

Furthermore, there is a possible use-after-free while iterating, 'node' can be free'd so we need to cache the next value to use.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

124

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.