CVE-2023-54035

A flaw was found in the Linux kernel's netfilter nf_tables component. During set element addition, an error path incorrectly decrements the chain reference counter twice. This reference count underflow could potentially lead to a use-after-free condition when the chain is subsequently freed while still in use.

Exploiting this vulnerability requires CAP_NET_ADMIN capability to manipulate nf_tables rules and trigger the specific error path during set element addition. The bug occurs in error handling, meaning normal successful operations are unaffected. The complexity of reliably triggering the use-after-free limits practical exploitability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.