What’s Vulnerable › Vulnerabilities

CVE-2023-6622: Kernel: null pointer dereference vulnerability in nft_dynset_init()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-08 · updated 2026-06-17
• Weakness: CWE-476

Description

A null pointer dereference vulnerability was found in nft_dynset_init() in net/netfilter/nft_dynset.c in nf_tables in the Linux kernel. This issue may allow a local attacker with CAP_NET_ADMIN user privilege to trigger a denial of service.

Affected products

• Fedoraproject Fedora: 38, 39
• Linux kernel: from 5.11 through 6.6; 6.7-rc1, 6.7-rc2, 6.7-rc3, 6.7-rc4
• Red Hat Enterprise Linux: 8.0, 9.0

References

• https://access.redhat.com/errata/RHSA-2024:2394
• https://access.redhat.com/errata/RHSA-2024:2950
• https://access.redhat.com/errata/RHSA-2024:3138
• https://access.redhat.com/security/cve/CVE-2023-6622
• https://bugzilla.redhat.com/show_bug.cgi?id=2253632
• https://github.com/torvalds/linux/commit/3701cd390fd731ee7ae8b8006246c8db82c72bea
• https://access.redhat.com/errata/RHSA-2024:2394
• https://access.redhat.com/errata/RHSA-2024:2950
• https://access.redhat.com/errata/RHSA-2024:3138
• https://access.redhat.com/security/cve/CVE-2023-6622
• https://bugzilla.redhat.com/show_bug.cgi?id=2253632
• https://github.com/torvalds/linux/commit/3701cd390fd731ee7ae8b8006246c8db82c72bea

Get alerted when CVE-2023-6622 or the next vulnerability affects your stack