GHSA-grc4-c844-m2mxMediumCVSS 5.5

In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to...

Published
March 1, 2023
Last Modified
October 14, 2026

🔗 CVE IDs covered (1)

CVE-2023-1095 →

📋 Description

In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zeroes, this results in a NULL pointer dereference.

🔗 References (5)