CVE-2023-42756

Summary

CVE-2023-42756 is a newly discovered vulnerability affecting the Netfilter subsystem of the Linux kernel. A race condition exists between IPSET_CMD_ADD and IPSET_CMD_SWAP commands, allowing a local user to cause a kernel panic. This occurs due to an incorrect invocation of `__ip_set_put` function on an unintended IP set. The exploitation of this flaw could lead to a system crash, posing a potential security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.