CVE-2023-42756
Kernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap
CVSS 3.1 4.4 MEDIUMCheck source for fixed versionsKEV status unknown
cve-program · CVE-2023-42756
PublishedA flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic due to the invocation of `__ip_set_put` on a wrong `set`. This issue may allow a local user to crash the system.
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2023-42756 · CVE overview and exploitation status
cve-program · CVE-2023-42756
Related changes
Linked by CVE identifier- Kernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap · Affected-version evidence changed · 7 Nov 2026
- Kernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap · Affected-version evidence changed · 1 Nov 2026