CVE-2023-42756: Kernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap

Modified

AliasesUBUNTU-CVE-2023-42756DEBIAN-CVE-2023-42756

Published 28-09-2023Last modified 01-11-2026

Vulnerability summary

CVE-2023-42756 is a medium (CVSS 4.7) vulnerability in debian debian_linux. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 19.8% of scored vulnerabilities. 2 public exploits are recorded.

Priority

Routine

Not severe (CVSS 4.4, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.7/10

010

Medium · v3.1 (NVD)

EPSS score

0.27%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2reference

Advisory lineage

Upstream 0 · Downstream 20 · Related 20

Timeline

28-09-2023
PublishedVulnerability first disclosed.
01-11-2026
Last modifiedVulnerability information updated.

Description

A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic due to the invocation of `__ip_set_put` on a wrong `set`. This issue may allow a local user to crash the system.

CVSS metrics

4 scores · 4 sources · 1 version

v3.14.7

EPSS trend

Probability

0.27%

Chance of exploitation in the next 30 days

Percentile

20%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.27% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

referenceUnverified
Exploit Reference (bugzilla.redhat.com)
Maturity: unknown
referenceUnverified
Exploit Reference (seclists.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-362Concurrent Execution using Shared Resource with Improper SynchronizationThe product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Affected systems

Version check

Known conditions: local access, administrative account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu100 products

linux< 5.4.0-165.182 | < 5.15.0-87.97
linux-allwinner-5.19All versions (No fix recorded)
linux-aws< 5.4.0-1112.121 | < 5.15.0-1048.53
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11All versions (No fix recorded)

linux-aws-5.13All versions (No fix recorded)
linux-aws-5.15< 5.15.0-1048.53~20.04.1
linux-aws-5.19All versions (No fix recorded)
linux-aws-5.3All versions (No fix recorded)
linux-aws-5.4< 5.4.0-1112.121~18.04.2
linux-aws-5.8All versions (No fix recorded)
linux-aws-6.2< 6.2.0-1014.14~22.04.1
linux-aws-6.5All versions (No fix recorded)
linux-aws-fips< 5.4.0-1112.121+fips1
linux-azureAll versions (No fix recorded) | < 5.4.0-1118.125 | < 5.15.0-1050.57
linux-azure-5.11All versions (No fix recorded)
linux-azure-5.13All versions (No fix recorded)
linux-azure-5.15< 5.15.0-1050.57~20.04.1
linux-azure-5.19All versions (No fix recorded)
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.4< 5.4.0-1118.125~18.04.1
linux-azure-5.8All versions (No fix recorded)
linux-azure-6.2< 6.2.0-1015.15~22.04.1
linux-azure-6.5All versions (No fix recorded)
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fdeAll versions (No fix recorded) | < 5.15.0-1050.57.1
linux-azure-fde-5.15< 5.15.0-1050.57~20.04.1.1
linux-azure-fde-5.19All versions (No fix recorded)
linux-azure-fde-6.2< 6.2.0-1015.15~22.04.1.1
linux-azure-fips< 5.4.0-1118.125+fips1
linux-bluefield< 5.4.0-1073.79 | < 5.15.0-1028.30
linux-fips< 5.4.0-1087.96
linux-gcpAll versions (No fix recorded) | < 5.4.0-1116.125 | < 5.15.0-1045.53
linux-gcp-5.11All versions (No fix recorded)
linux-gcp-5.13All versions (No fix recorded)
linux-gcp-5.15< 5.15.0-1045.53~20.04.2
linux-gcp-5.19All versions (No fix recorded)
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.4< 5.4.0-1116.125~18.04.1
linux-gcp-5.8All versions (No fix recorded)
linux-gcp-6.2< 6.2.0-1017.19~22.04.1
linux-gcp-fips< 5.4.0-1116.125+fips1
linux-gkeAll versions (No fix recorded) | < 5.15.0-1045.50
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.15All versions (No fix recorded)
linux-gke-5.4All versions (No fix recorded)
linux-gkeop< 5.4.0-1079.83 | < 5.15.0-1031.37
linux-gkeop-5.15< 5.15.0-1031.37~20.04.1
linux-gkeop-5.4All versions (No fix recorded)
linux-hweAll versions (No fix recorded)
linux-hwe-5.11All versions (No fix recorded)
linux-hwe-5.13All versions (No fix recorded)
linux-hwe-5.15< 5.15.0-87.97~20.04.1
linux-hwe-5.19All versions (No fix recorded)
linux-hwe-5.4< 5.4.0-165.182~18.04.1
linux-hwe-5.8All versions (No fix recorded)
linux-hwe-6.2< 6.2.0-35.35~22.04.1
linux-hwe-edgeAll versions (No fix recorded)
linux-ibm< 5.4.0-1059.64 | < 5.15.0-1041.44
linux-ibm-5.15< 5.15.0-1041.44~20.04.1
linux-ibm-5.4< 5.4.0-1059.64~18.04.1
linux-intel-5.13All versions (No fix recorded)
linux-intel-iot-realtime< 5.15.0-1041.43
linux-iot< 5.4.0-1024.25
linux-kvm< 5.4.0-1101.107 | < 5.15.0-1045.50
linux-lowlatency< 5.15.0-87.96
linux-lowlatency-hwe-5.15< 5.15.0-87.96~20.04.1
linux-lowlatency-hwe-5.19All versions (No fix recorded)
linux-lowlatency-hwe-6.2< 6.2.0-1015.15~22.04.1
linux-nvidia< 5.15.0-1039.39
linux-oemAll versions (No fix recorded)
linux-oem-5.10All versions (No fix recorded)
linux-oem-5.13All versions (No fix recorded)
linux-oem-5.14All versions (No fix recorded)
linux-oem-5.17All versions (No fix recorded)
linux-oem-5.6All versions (No fix recorded)
linux-oem-6.0All versions (No fix recorded)
linux-oem-6.1< 6.1.0-1024.24
linux-oem-6.5< 6.5.0-1007.7
linux-oracle< 5.4.0-1111.120 | < 5.15.0-1046.52
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.11All versions (No fix recorded)
linux-oracle-5.13All versions (No fix recorded)
linux-oracle-5.15< 5.15.0-1046.52~20.04.1
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.4< 5.4.0-1111.120~18.04.1
linux-oracle-5.8All versions (No fix recorded)
linux-raspi< 5.4.0-1096.107 | < 5.15.0-1041.44
linux-raspi-5.4< 5.4.0-1096.107~18.04.1
linux-raspi-realtimeAll versions (No fix recorded)
linux-raspi2All versions (No fix recorded)
linux-realtimeAll versions (No fix recorded) | < 5.15.0-1049.55
linux-riscvAll versions (No fix recorded)
linux-riscv-5.11All versions (No fix recorded)
linux-riscv-5.15< 5.15.0-1044.48~20.04.1
linux-riscv-5.19All versions (No fix recorded)
linux-riscv-5.8All versions (No fix recorded)
linux-starfive-5.19All versions (No fix recorded)
linux-starfive-6.2< 6.2.0-1007.8~22.04.1
linux-xilinx-zynqmp< 5.4.0-1032.36

Show all 100

Debian2 products

linux< 6.1.55-1 | < 6.5.6-1
debian_linuxEOL10.0

Fedoraproject1 product

fedoraEOL37 | 38 | 39

Linux1 product

linux_kernel< 6.6 | 6.6:rc1 | 6.6:rc2

Redhat1 product

enterprise_linux9.0

5 vendors · 105 products

References

33 links

access.redhat.com/errata/RHSA-2024:2394Vendor AdvisoryX Refsource REDHAT
access.redhat.com/security/cve/CVE-2023-42756VDB EntryX Refsource REDHATPatchThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=2239848Issue TrackingX Refsource REDHATExploitPatchThird Party Advisory
seclists.org/oss-sec/2023/q3/242ExploitMailing ListPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2023/10/msg00027.htmlX Transferred
lists.fedoraproject.org/archives/…X Transferred
lists.fedoraproject.org/archives/…X Transferred
lists.fedoraproject.org/archives/…X Transferred
ubuntu.com/security/CVE-2023-42756REPORT
www.openwall.com/lists/oss-security/2023/09/27/2REPORT

Show all 33 references

git.kernel.org/linus/7433b6d2afd512d04398c73aa984d1e285be125bREPORT
lore.kernel.org/netfilter-devel/ZPZqetxOmH+w%2Fmyc@westworld/REPORT
ubuntu.com/security/notices/USN-6441-1Advisory
ubuntu.com/security/notices/USN-6442-1Advisory
ubuntu.com/security/notices/USN-6443-1Advisory
ubuntu.com/security/notices/USN-6444-1Advisory
ubuntu.com/security/notices/USN-6445-1Advisory
ubuntu.com/security/notices/USN-6446-1Advisory
ubuntu.com/security/notices/USN-6441-2Advisory
ubuntu.com/security/notices/USN-6444-2Advisory
ubuntu.com/security/notices/USN-6445-2Advisory
ubuntu.com/security/notices/USN-6446-2Advisory
ubuntu.com/security/notices/USN-6446-3Advisory
ubuntu.com/security/notices/USN-6454-1Advisory
ubuntu.com/security/notices/USN-6441-3Advisory
ubuntu.com/security/notices/USN-6454-2Advisory
ubuntu.com/security/notices/USN-6466-1Advisory
ubuntu.com/security/notices/USN-6454-3Advisory
ubuntu.com/security/notices/USN-6454-4Advisory
ubuntu.com/security/notices/USN-6479-1Advisory
www.cve.org/CVERecord?id=CVE-2023-42756REPORT
security-tracker.debian.org/tracker/CVE-2023-42756Advisory
nvd.nist.gov/vuln/detail/CVE-2023-42756OvalAdvisory