In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: don't skip expired elements during walk
There is an asymmetry between commit/abort and preparation phase if the following conditions are met:
In this case, following sequence is problematic:
If E has already expired in 1), it will be ignored during list walk, so its use count won't have been changed.
Then, when set is culled, ->destroy callback will zap the element via nftablessetelemdestroy(), but this function is only safe for elements that have been deactivated earlier from the preparation phase: lack of earlier deactivate removes the element but leaks the chain use count, which results in a WARN splat when the chain gets removed later, plus a leak of the nft_chain structure.
Update pipapo_get() not to skip expired elements, otherwise flush command reports bogus ENOENT errors.
[
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd156ce9553dcaf2d6ee2c825d1a5a1718e86524",
"id": "CVE-2023-52924-03e8289f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"87490029194965272779075896677027776430",
"201149866361769406222794140289069334357",
"83307419566762120186910816284985064253",
"176231494833646300007391102790314653285",
"297750411707348716419185321883957797"
]
},
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7c7e658a36f8b1522bd3586d8137e5f93a25ddc5",
"id": "CVE-2023-52924-0502c885",
"digest": {
"threshold": 0.9,
"line_hashes": [
"64579046218634495732500928472143794233",
"319358167888675700546004143655919018246",
"68060956754707077990763757731023718016",
"230909875194585557912595751571699961513",
"267372470571364131599161225247911519067"
]
},
"target": {
"file": "net/netfilter/nft_set_rbtree.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b15ea4017af82011dd55225ce77cce3d4dfc169c",
"id": "CVE-2023-52924-077c24d3",
"digest": {
"function_hash": "232245855086898355457798975065414698166",
"length": 221.0
},
"target": {
"function": "nft_pipapo_get",
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b15ea4017af82011dd55225ce77cce3d4dfc169c",
"id": "CVE-2023-52924-0da323b9",
"digest": {
"threshold": 0.9,
"line_hashes": [
"277009777086945041354373109532462979003",
"37913353283270951028466598595219568766",
"47467705664934867237012946970060261824",
"176449170214409422969221562182924176361",
"257536698339831443906053183307422117440"
]
},
"target": {
"file": "net/netfilter/nft_set_hash.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@59dab3bf0b8fc08eb802721c0532f13dd89209b8",
"id": "CVE-2023-52924-18b3a9ad",
"digest": {
"threshold": 0.9,
"line_hashes": [
"87490029194965272779075896677027776430",
"201149866361769406222794140289069334357",
"83307419566762120186910816284985064253",
"176231494833646300007391102790314653285",
"297750411707348716419185321883957797"
]
},
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24138933b97b055d486e8064b4a1721702442a9b",
"id": "CVE-2023-52924-1c94b94e",
"digest": {
"threshold": 0.9,
"line_hashes": [
"59991365330836799056230157008316897573",
"6388182324186527768492320040473276125",
"295254265499216585891150949484330955280",
"160929179273872180388770431252944675889",
"302648756373187893485565954925615936442",
"146584677789112666727222808121928066039",
"109451733339387830078197954060447030338",
"112618845522564984051034088256552596238",
"218864670055743898401048593562699684718",
"18288424732994200544676725207318319442",
"258641842272307880741777280323793010348",
"299164888055728033925813041296907213967",
"331599174375336406829023250300975379216",
"12306568524032163998035901438576959405",
"261201059142978451471627509832282341929"
]
},
"target": {
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7c7e658a36f8b1522bd3586d8137e5f93a25ddc5",
"id": "CVE-2023-52924-1d830013",
"digest": {
"function_hash": "232245855086898355457798975065414698166",
"length": 221.0
},
"target": {
"function": "nft_pipapo_get",
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b15ea4017af82011dd55225ce77cce3d4dfc169c",
"id": "CVE-2023-52924-23e43f2d",
"digest": {
"function_hash": "1633069507609323409781982229333633737",
"length": 672.0
},
"target": {
"function": "nft_rbtree_walk",
"file": "net/netfilter/nft_set_rbtree.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1da4874d05da1526b11b82fc7f3c7ac38749ddf8",
"id": "CVE-2023-52924-2c72d88d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"64579046218634495732500928472143794233",
"319358167888675700546004143655919018246",
"68060956754707077990763757731023718016",
"230909875194585557912595751571699961513",
"267372470571364131599161225247911519067"
]
},
"target": {
"file": "net/netfilter/nft_set_rbtree.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94313a196b44184b5b52c1876da6a537701b425a",
"id": "CVE-2023-52924-2ca9f156",
"digest": {
"threshold": 0.9,
"line_hashes": [
"64579046218634495732500928472143794233",
"319358167888675700546004143655919018246",
"68060956754707077990763757731023718016",
"230909875194585557912595751571699961513",
"267372470571364131599161225247911519067"
]
},
"target": {
"file": "net/netfilter/nft_set_rbtree.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1da4874d05da1526b11b82fc7f3c7ac38749ddf8",
"id": "CVE-2023-52924-2d11dc46",
"digest": {
"function_hash": "1633069507609323409781982229333633737",
"length": 672.0
},
"target": {
"function": "nft_rbtree_walk",
"file": "net/netfilter/nft_set_rbtree.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94313a196b44184b5b52c1876da6a537701b425a",
"id": "CVE-2023-52924-34408b44",
"digest": {
"threshold": 0.9,
"line_hashes": [
"87490029194965272779075896677027776430",
"201149866361769406222794140289069334357",
"83307419566762120186910816284985064253",
"176231494833646300007391102790314653285",
"297750411707348716419185321883957797"
]
},
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24138933b97b055d486e8064b4a1721702442a9b",
"id": "CVE-2023-52924-376411fc",
"digest": {
"threshold": 0.9,
"line_hashes": [
"277009777086945041354373109532462979003",
"37913353283270951028466598595219568766",
"47467705664934867237012946970060261824",
"176449170214409422969221562182924176361",
"257536698339831443906053183307422117440"
]
},
"target": {
"file": "net/netfilter/nft_set_hash.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24138933b97b055d486e8064b4a1721702442a9b",
"id": "CVE-2023-52924-3cb46902",
"digest": {
"threshold": 0.9,
"line_hashes": [
"64579046218634495732500928472143794233",
"319358167888675700546004143655919018246",
"68060956754707077990763757731023718016",
"230909875194585557912595751571699961513",
"267372470571364131599161225247911519067"
]
},
"target": {
"file": "net/netfilter/nft_set_rbtree.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd156ce9553dcaf2d6ee2c825d1a5a1718e86524",
"id": "CVE-2023-52924-42d51b06",
"digest": {
"function_hash": "260973966852326313382990829320757412953",
"length": 914.0
},
"target": {
"function": "nft_pipapo_walk",
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd156ce9553dcaf2d6ee2c825d1a5a1718e86524",
"id": "CVE-2023-52924-48036c26",
"digest": {
"threshold": 0.9,
"line_hashes": [
"64579046218634495732500928472143794233",
"319358167888675700546004143655919018246",
"68060956754707077990763757731023718016",
"230909875194585557912595751571699961513",
"267372470571364131599161225247911519067"
]
},
"target": {
"file": "net/netfilter/nft_set_rbtree.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@59dab3bf0b8fc08eb802721c0532f13dd89209b8",
"id": "CVE-2023-52924-4e02fc40",
"digest": {
"function_hash": "260973966852326313382990829320757412953",
"length": 914.0
},
"target": {
"function": "nft_pipapo_walk",
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7c7e658a36f8b1522bd3586d8137e5f93a25ddc5",
"id": "CVE-2023-52924-5885a556",
"digest": {
"function_hash": "290267354819519708560965586914543060736",
"length": 213.0
},
"target": {
"function": "nf_tables_dump_setelem",
"file": "net/netfilter/nf_tables_api.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7c7e658a36f8b1522bd3586d8137e5f93a25ddc5",
"id": "CVE-2023-52924-60e76726",
"digest": {
"threshold": 0.9,
"line_hashes": [
"277009777086945041354373109532462979003",
"37913353283270951028466598595219568766",
"47467705664934867237012946970060261824",
"176449170214409422969221562182924176361",
"257536698339831443906053183307422117440"
]
},
"target": {
"file": "net/netfilter/nft_set_hash.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7c7e658a36f8b1522bd3586d8137e5f93a25ddc5",
"id": "CVE-2023-52924-648592f9",
"digest": {
"threshold": 0.9,
"line_hashes": [
"59991365330836799056230157008316897573",
"6388182324186527768492320040473276125",
"295254265499216585891150949484330955280",
"160929179273872180388770431252944675889",
"302648756373187893485565954925615936442",
"146584677789112666727222808121928066039",
"109451733339387830078197954060447030338",
"112618845522564984051034088256552596238",
"218864670055743898401048593562699684718",
"18288424732994200544676725207318319442",
"258641842272307880741777280323793010348",
"299164888055728033925813041296907213967",
"331599174375336406829023250300975379216",
"12306568524032163998035901438576959405",
"261201059142978451471627509832282341929"
]
},
"target": {
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1da4874d05da1526b11b82fc7f3c7ac38749ddf8",
"id": "CVE-2023-52924-64ad3d3b",
"digest": {
"function_hash": "47281442147613716319630656109792442576",
"length": 717.0
},
"target": {
"function": "nft_rhash_walk",
"file": "net/netfilter/nft_set_hash.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@59dab3bf0b8fc08eb802721c0532f13dd89209b8",
"id": "CVE-2023-52924-679d94ab",
"digest": {
"threshold": 0.9,
"line_hashes": [
"59991365330836799056230157008316897573",
"6388182324186527768492320040473276125",
"295254265499216585891150949484330955280",
"160929179273872180388770431252944675889",
"302648756373187893485565954925615936442",
"146584677789112666727222808121928066039",
"109451733339387830078197954060447030338",
"112618845522564984051034088256552596238",
"218864670055743898401048593562699684718",
"18288424732994200544676725207318319442",
"258641842272307880741777280323793010348",
"299164888055728033925813041296907213967",
"331599174375336406829023250300975379216",
"12306568524032163998035901438576959405",
"261201059142978451471627509832282341929"
]
},
"target": {
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@59dab3bf0b8fc08eb802721c0532f13dd89209b8",
"id": "CVE-2023-52924-680db750",
"digest": {
"function_hash": "47281442147613716319630656109792442576",
"length": 717.0
},
"target": {
"function": "nft_rhash_walk",
"file": "net/netfilter/nft_set_hash.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd156ce9553dcaf2d6ee2c825d1a5a1718e86524",
"id": "CVE-2023-52924-69785c18",
"digest": {
"threshold": 0.9,
"line_hashes": [
"277009777086945041354373109532462979003",
"37913353283270951028466598595219568766",
"47467705664934867237012946970060261824",
"176449170214409422969221562182924176361",
"257536698339831443906053183307422117440"
]
},
"target": {
"file": "net/netfilter/nft_set_hash.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1da4874d05da1526b11b82fc7f3c7ac38749ddf8",
"id": "CVE-2023-52924-6ba5b29d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"87490029194965272779075896677027776430",
"201149866361769406222794140289069334357",
"83307419566762120186910816284985064253",
"176231494833646300007391102790314653285",
"297750411707348716419185321883957797"
]
},
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd156ce9553dcaf2d6ee2c825d1a5a1718e86524",
"id": "CVE-2023-52924-709e3d5a",
"digest": {
"function_hash": "232245855086898355457798975065414698166",
"length": 221.0
},
"target": {
"function": "nft_pipapo_get",
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24138933b97b055d486e8064b4a1721702442a9b",
"id": "CVE-2023-52924-70e23ce5",
"digest": {
"function_hash": "114611005338122812098954102952090455813",
"length": 228.0
},
"target": {
"function": "nf_tables_dump_setelem",
"file": "net/netfilter/nf_tables_api.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b15ea4017af82011dd55225ce77cce3d4dfc169c",
"id": "CVE-2023-52924-73a0a251",
"digest": {
"function_hash": "260973966852326313382990829320757412953",
"length": 914.0
},
"target": {
"function": "nft_pipapo_walk",
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24138933b97b055d486e8064b4a1721702442a9b",
"id": "CVE-2023-52924-77f9c234",
"digest": {
"function_hash": "232245855086898355457798975065414698166",
"length": 221.0
},
"target": {
"function": "nft_pipapo_get",
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7c7e658a36f8b1522bd3586d8137e5f93a25ddc5",
"id": "CVE-2023-52924-7f2c7a62",
"digest": {
"function_hash": "260973966852326313382990829320757412953",
"length": 914.0
},
"target": {
"function": "nft_pipapo_walk",
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24138933b97b055d486e8064b4a1721702442a9b",
"id": "CVE-2023-52924-7fb421f9",
"digest": {
"function_hash": "47281442147613716319630656109792442576",
"length": 717.0
},
"target": {
"function": "nft_rhash_walk",
"file": "net/netfilter/nft_set_hash.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b15ea4017af82011dd55225ce77cce3d4dfc169c",
"id": "CVE-2023-52924-832e1c7d",
"digest": {
"function_hash": "47281442147613716319630656109792442576",
"length": 717.0
},
"target": {
"function": "nft_rhash_walk",
"file": "net/netfilter/nft_set_hash.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24138933b97b055d486e8064b4a1721702442a9b",
"id": "CVE-2023-52924-8cd82248",
"digest": {
"function_hash": "238632269383098369342972861743296231809",
"length": 1303.0
},
"target": {
"function": "pipapo_get",
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94313a196b44184b5b52c1876da6a537701b425a",
"id": "CVE-2023-52924-8dae41b9",
"digest": {
"threshold": 0.9,
"line_hashes": [
"277009777086945041354373109532462979003",
"37913353283270951028466598595219568766",
"47467705664934867237012946970060261824",
"176449170214409422969221562182924176361",
"257536698339831443906053183307422117440"
]
},
"target": {
"file": "net/netfilter/nft_set_hash.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7c7e658a36f8b1522bd3586d8137e5f93a25ddc5",
"id": "CVE-2023-52924-8e88993a",
"digest": {
"function_hash": "47281442147613716319630656109792442576",
"length": 717.0
},
"target": {
"function": "nft_rhash_walk",
"file": "net/netfilter/nft_set_hash.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24138933b97b055d486e8064b4a1721702442a9b",
"id": "CVE-2023-52924-9477ef6b",
"digest": {
"function_hash": "260973966852326313382990829320757412953",
"length": 914.0
},
"target": {
"function": "nft_pipapo_walk",
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@59dab3bf0b8fc08eb802721c0532f13dd89209b8",
"id": "CVE-2023-52924-98d4afd2",
"digest": {
"threshold": 0.9,
"line_hashes": [
"277009777086945041354373109532462979003",
"37913353283270951028466598595219568766",
"47467705664934867237012946970060261824",
"176449170214409422969221562182924176361",
"257536698339831443906053183307422117440"
]
},
"target": {
"file": "net/netfilter/nft_set_hash.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b15ea4017af82011dd55225ce77cce3d4dfc169c",
"id": "CVE-2023-52924-9b18db8d",
"digest": {
"function_hash": "238632269383098369342972861743296231809",
"length": 1303.0
},
"target": {
"function": "pipapo_get",
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b15ea4017af82011dd55225ce77cce3d4dfc169c",
"id": "CVE-2023-52924-9fee7b66",
"digest": {
"threshold": 0.9,
"line_hashes": [
"64579046218634495732500928472143794233",
"319358167888675700546004143655919018246",
"68060956754707077990763757731023718016",
"230909875194585557912595751571699961513",
"267372470571364131599161225247911519067"
]
},
"target": {
"file": "net/netfilter/nft_set_rbtree.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7c7e658a36f8b1522bd3586d8137e5f93a25ddc5",
"id": "CVE-2023-52924-a0d7ad50",
"digest": {
"function_hash": "238632269383098369342972861743296231809",
"length": 1303.0
},
"target": {
"function": "pipapo_get",
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd156ce9553dcaf2d6ee2c825d1a5a1718e86524",
"id": "CVE-2023-52924-a4ad090e",
"digest": {
"threshold": 0.9,
"line_hashes": [
"59991365330836799056230157008316897573",
"6388182324186527768492320040473276125",
"295254265499216585891150949484330955280",
"160929179273872180388770431252944675889",
"302648756373187893485565954925615936442",
"146584677789112666727222808121928066039",
"109451733339387830078197954060447030338",
"112618845522564984051034088256552596238",
"218864670055743898401048593562699684718",
"18288424732994200544676725207318319442",
"258641842272307880741777280323793010348",
"299164888055728033925813041296907213967",
"331599174375336406829023250300975379216",
"12306568524032163998035901438576959405",
"261201059142978451471627509832282341929"
]
},
"target": {
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24138933b97b055d486e8064b4a1721702442a9b",
"id": "CVE-2023-52924-a691bd4d",
"digest": {
"function_hash": "1633069507609323409781982229333633737",
"length": 672.0
},
"target": {
"function": "nft_rbtree_walk",
"file": "net/netfilter/nft_set_rbtree.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd156ce9553dcaf2d6ee2c825d1a5a1718e86524",
"id": "CVE-2023-52924-adf88bcc",
"digest": {
"function_hash": "238632269383098369342972861743296231809",
"length": 1303.0
},
"target": {
"function": "pipapo_get",
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b15ea4017af82011dd55225ce77cce3d4dfc169c",
"id": "CVE-2023-52924-b5909c60",
"digest": {
"threshold": 0.9,
"line_hashes": [
"87490029194965272779075896677027776430",
"201149866361769406222794140289069334357",
"83307419566762120186910816284985064253",
"176231494833646300007391102790314653285",
"297750411707348716419185321883957797"
]
},
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7c7e658a36f8b1522bd3586d8137e5f93a25ddc5",
"id": "CVE-2023-52924-b961b535",
"digest": {
"function_hash": "1633069507609323409781982229333633737",
"length": 672.0
},
"target": {
"function": "nft_rbtree_walk",
"file": "net/netfilter/nft_set_rbtree.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b15ea4017af82011dd55225ce77cce3d4dfc169c",
"id": "CVE-2023-52924-bfae8e48",
"digest": {
"function_hash": "290267354819519708560965586914543060736",
"length": 213.0
},
"target": {
"function": "nf_tables_dump_setelem",
"file": "net/netfilter/nf_tables_api.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1da4874d05da1526b11b82fc7f3c7ac38749ddf8",
"id": "CVE-2023-52924-c03eea66",
"digest": {
"threshold": 0.9,
"line_hashes": [
"277009777086945041354373109532462979003",
"37913353283270951028466598595219568766",
"47467705664934867237012946970060261824",
"176449170214409422969221562182924176361",
"257536698339831443906053183307422117440"
]
},
"target": {
"file": "net/netfilter/nft_set_hash.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24138933b97b055d486e8064b4a1721702442a9b",
"id": "CVE-2023-52924-c11148da",
"digest": {
"threshold": 0.9,
"line_hashes": [
"87490029194965272779075896677027776430",
"201149866361769406222794140289069334357",
"83307419566762120186910816284985064253",
"295616038700477002892009699107678392255",
"34610916670431055326799599087802768322"
]
},
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@59dab3bf0b8fc08eb802721c0532f13dd89209b8",
"id": "CVE-2023-52924-c3f26325",
"digest": {
"function_hash": "1633069507609323409781982229333633737",
"length": 672.0
},
"target": {
"function": "nft_rbtree_walk",
"file": "net/netfilter/nft_set_rbtree.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@59dab3bf0b8fc08eb802721c0532f13dd89209b8",
"id": "CVE-2023-52924-c4637ee2",
"digest": {
"function_hash": "238632269383098369342972861743296231809",
"length": 1303.0
},
"target": {
"function": "pipapo_get",
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@59dab3bf0b8fc08eb802721c0532f13dd89209b8",
"id": "CVE-2023-52924-cad3bc4e",
"digest": {
"function_hash": "232245855086898355457798975065414698166",
"length": 221.0
},
"target": {
"function": "nft_pipapo_get",
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94313a196b44184b5b52c1876da6a537701b425a",
"id": "CVE-2023-52924-cee292ec",
"digest": {
"function_hash": "1633069507609323409781982229333633737",
"length": 672.0
},
"target": {
"function": "nft_rbtree_walk",
"file": "net/netfilter/nft_set_rbtree.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd156ce9553dcaf2d6ee2c825d1a5a1718e86524",
"id": "CVE-2023-52924-d04fe2e0",
"digest": {
"function_hash": "1633069507609323409781982229333633737",
"length": 672.0
},
"target": {
"function": "nft_rbtree_walk",
"file": "net/netfilter/nft_set_rbtree.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7c7e658a36f8b1522bd3586d8137e5f93a25ddc5",
"id": "CVE-2023-52924-d875c9de",
"digest": {
"threshold": 0.9,
"line_hashes": [
"87490029194965272779075896677027776430",
"201149866361769406222794140289069334357",
"83307419566762120186910816284985064253",
"176231494833646300007391102790314653285",
"297750411707348716419185321883957797"
]
},
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b15ea4017af82011dd55225ce77cce3d4dfc169c",
"id": "CVE-2023-52924-db8ae9fc",
"digest": {
"threshold": 0.9,
"line_hashes": [
"59991365330836799056230157008316897573",
"6388182324186527768492320040473276125",
"295254265499216585891150949484330955280",
"160929179273872180388770431252944675889",
"302648756373187893485565954925615936442",
"146584677789112666727222808121928066039",
"109451733339387830078197954060447030338",
"112618845522564984051034088256552596238",
"218864670055743898401048593562699684718",
"18288424732994200544676725207318319442",
"258641842272307880741777280323793010348",
"299164888055728033925813041296907213967",
"331599174375336406829023250300975379216",
"12306568524032163998035901438576959405",
"261201059142978451471627509832282341929"
]
},
"target": {
"file": "net/netfilter/nft_set_pipapo.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94313a196b44184b5b52c1876da6a537701b425a",
"id": "CVE-2023-52924-dd976bbe",
"digest": {
"function_hash": "154977358033309485681734054090295261392",
"length": 800.0
},
"target": {
"function": "nft_rhash_walk",
"file": "net/netfilter/nft_set_hash.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd156ce9553dcaf2d6ee2c825d1a5a1718e86524",
"id": "CVE-2023-52924-e7c0e8ab",
"digest": {
"function_hash": "47281442147613716319630656109792442576",
"length": 717.0
},
"target": {
"function": "nft_rhash_walk",
"file": "net/netfilter/nft_set_hash.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@59dab3bf0b8fc08eb802721c0532f13dd89209b8",
"id": "CVE-2023-52924-eabe41df",
"digest": {
"function_hash": "290267354819519708560965586914543060736",
"length": 213.0
},
"target": {
"function": "nf_tables_dump_setelem",
"file": "net/netfilter/nf_tables_api.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@59dab3bf0b8fc08eb802721c0532f13dd89209b8",
"id": "CVE-2023-52924-efa3a3ae",
"digest": {
"threshold": 0.9,
"line_hashes": [
"64579046218634495732500928472143794233",
"319358167888675700546004143655919018246",
"68060956754707077990763757731023718016",
"230909875194585557912595751571699961513",
"267372470571364131599161225247911519067"
]
},
"target": {
"file": "net/netfilter/nft_set_rbtree.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1da4874d05da1526b11b82fc7f3c7ac38749ddf8",
"id": "CVE-2023-52924-f770beef",
"digest": {
"function_hash": "290267354819519708560965586914543060736",
"length": 213.0
},
"target": {
"function": "nf_tables_dump_setelem",
"file": "net/netfilter/nf_tables_api.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd156ce9553dcaf2d6ee2c825d1a5a1718e86524",
"id": "CVE-2023-52924-fa91e72d",
"digest": {
"function_hash": "290267354819519708560965586914543060736",
"length": 213.0
},
"target": {
"function": "nf_tables_dump_setelem",
"file": "net/netfilter/nf_tables_api.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94313a196b44184b5b52c1876da6a537701b425a",
"id": "CVE-2023-52924-faf7ad46",
"digest": {
"function_hash": "290267354819519708560965586914543060736",
"length": 213.0
},
"target": {
"function": "nf_tables_dump_setelem",
"file": "net/netfilter/nf_tables_api.c"
},
"signature_type": "Function",
"signature_version": "v1"
}
]