{"affected":[{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:5.14.0-427.13.1.el9_4","versionType":"rpm"}]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","product":"Red Hat Enterprise Linux 6","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","product":"Red Hat Enterprise Linux 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel-rt","product":"Red Hat Enterprise Linux 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel-rt","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel-rt","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.6","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2023-42756","cwes":["CWE-362"],"description":"A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic due to the invocation of `__ip_set_put` on a wrong `set`. This issue may allow a local user to crash the system.","epss":{"date":"2026-11-06","percentile":0.1984,"score":0.00274},"exploits":[{"kind":"exploit","source":"secalert@redhat.com","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239848"},{"kind":"exploit","source":"secalert@redhat.com","url":"https://seclists.org/oss-sec/2023/q3/242"},{"kind":"exploit","source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239848"},{"kind":"exploit","source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://seclists.org/oss-sec/2023/q3/242"}],"kev":null,"metrics":[{"score":4.4,"severity":"medium","source":"CNA: redhat","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},{"score":4.7,"severity":"medium","source":"NVD: nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},{"score":4.4,"severity":"medium","source":"NVD: secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1794051165054,"publishedAt":1695909337430,"references":[{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2024:2394"},{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2023-42756"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239848"},{"source":"CNA: redhat","tags":[],"url":"https://seclists.org/oss-sec/2023/q3/242"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/errata/RHSA-2024:2394"},{"source":"ADP: CVE","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/security/cve/CVE-2023-42756"},{"source":"ADP: CVE","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239848"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GISYSL3F6WIEVGHJGLC2MFNTUXHPTKQH/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GPMICQ2HVZO5UAM5KPXHAZKA2U3ZDOO6/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V5PDNWPKAP3WL5RQZ4RIDS6MG32OHH5R/"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://seclists.org/oss-sec/2023/q3/242"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2024:2394"},{"source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"],"url":"https://access.redhat.com/security/cve/CVE-2023-42756"},{"source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239848"},{"source":"secalert@redhat.com","tags":["Exploit","Mailing List","Patch","Third Party Advisory"],"url":"https://seclists.org/oss-sec/2023/q3/242"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://access.redhat.com/errata/RHSA-2024:2394"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://access.redhat.com/security/cve/CVE-2023-42756"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239848"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GISYSL3F6WIEVGHJGLC2MFNTUXHPTKQH/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GPMICQ2HVZO5UAM5KPXHAZKA2U3ZDOO6/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V5PDNWPKAP3WL5RQZ4RIDS6MG32OHH5R/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Patch","Third Party Advisory"],"url":"https://seclists.org/oss-sec/2023/q3/242"}],"remediation":[{"kind":"workaround","source":"CNA: redhat","text":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"kind":"fix","source":"secalert@redhat.com","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://access.redhat.com/security/cve/CVE-2023-42756"},{"kind":"fix","source":"secalert@redhat.com","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239848"},{"kind":"fix","source":"secalert@redhat.com","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://seclists.org/oss-sec/2023/q3/242"},{"kind":"fix","source":"af854a3a-2127-422b-91ae-364da2661108","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://access.redhat.com/security/cve/CVE-2023-42756"},{"kind":"fix","source":"af854a3a-2127-422b-91ae-364da2661108","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239848"},{"kind":"fix","source":"af854a3a-2127-422b-91ae-364da2661108","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://seclists.org/oss-sec/2023/q3/242"}],"revision":"6bd2935db89ae7e8e4ccb47aecebdc9e7f56e67535ae21d481d571ffb461ae51","sources":[{"modifiedAt":1794051165054,"name":"CNA: redhat","retrievedAt":1794053339597,"url":"https://www.cve.org/CVERecord?id=CVE-2023-42756"},{"modifiedAt":1793531935300,"name":"NVD","retrievedAt":1793578541993,"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42756"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794030575811,"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-42756"}],"ssvc":{"assessedAt":1740688337539,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Kernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap","updatedAt":1794053339597}