Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2023-52927— netfilter: allow exp not to be removed in nf_ct_find_expectation

Quick assessment

Affected
Linux Linux
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于nf_ct_find_expectation函数未移除exp，可能导致在某些场景下创建的ct不会被确认。

CVSS 7.8 · High EPSS 0.32% · P23

Possible ATT&CK Techniques 1 AI

T1135 · Network Share Discovery

Affected Version Matrix 6

VendorProduct Version RangeStatus
Linux Linux 1bc91a5ddf3eaea0e0ea957cccf3abdcfcace00e< 3fa58a6fbd1e9e5682d09cdafb08fba004cb12ec affected
1bc91a5ddf3eaea0e0ea957cccf3abdcfcace00e< 4914109a8e1e494c6aa9852f9e84ec77a5fc643f affected
5.18 affected
< 5.18 unaffected
6.1.130≤ 6.1.* unaffected
6.6≤ * unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-52927

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
netfilter: allow exp not to be removed in nf_ct_find_expectation
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nf_ct_find_expectation Currently nf_conntrack_in() calling nf_ct_find_expectation() will remove the exp from the hash table. However, in some scenario, we expect the exp not to be removed when the created ct will not be confirmed, like in OVS and TC conntrack in the following patches. This patch allows exp not to be removed by setting IPS_CONFIRMED in the status of the tmpl.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于nf_ct_find_expectation函数未移除exp，可能导致在某些场景下创建的ct不会被确认。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 1bc91a5ddf3eaea0e0ea957cccf3abdcfcace00e ~ 3fa58a6fbd1e9e5682d09cdafb08fba004cb12ec -
Linux Linux 5.18 -

II. Public POCs for CVE-2023-52927

# POC Description Source Link Shenlong Link
1 None https://github.com/seadragnol/CVE-2023-52927 POC Details
2 None https://github.com/HoangNhoo/Reproduce-CVE-2023-52927 POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-52927

请登录查看更多情报信息。

Other References for CVE-2023-52927 (2)

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux