CVE-2023-53200
netfilter: x_tables: fix percpu counter block leak on error path when creating new netns
References
Notes
carnil> Introduced in 71ae0dff02d7 ("netfilter: xtables: use percpu rule counters").
carnil> Vulnerable versions: 4.2.
Bugs
Status
| Branch |
Status |
| upstream |
released (6.3-rc1) [0af8c09c896810879387decfba8c942994bb61f5]
|
| 6.18-upstream-stable |
N/A "Fixed before branching point"
|
| 6.17-upstream-stable |
N/A "Fixed before branching point"
|
| 6.16-upstream-stable |
N/A "Fixed before branching point"
|
| 6.12-upstream-stable |
N/A "Fixed before branching point"
|
| 6.6-upstream-stable |
N/A "Fixed before branching point"
|
| 6.1-upstream-stable |
released (6.1.18) [512b6c4b83c91d007301ea7d7f095d16c3aceacd]
|
| 5.10-upstream-stable |
needed
|
| sid |
released (6.1.20-1)
|
| 6.12-trixie-security |
N/A "Fixed before branching point"
|
| 6.1-bookworm-security |
N/A "Fixed before branching point"
|
| 5.10-bullseye-security |
needed
|