CVE-2026-23333

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-23333", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "REJECTED", "assignerShortName": "Linux", "dateReserved": "2026-01-13T15:37:45.997Z", "datePublished": "2026-03-25T10:27:23.869Z", "dateUpdated": "2026-04-13T13:24:39.499Z", "dateRejected": "2026-04-13T13:24:39.499Z"}, "containers": {"cna": {"rejectedReasons": [{"lang": "en", "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-04-13T13:24:39.499Z"}, "x_generator": {"engine": "cvelib 1.8.0"}}}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}], "id": "CVE-2026-23333", "lastModified": "2026-10-16T14:10:00.120", "metrics": {}, "published": "2026-03-25T11:16:30.780", "references": [], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Rejected"}

{"bugzilla": {"description": "kernel: netfilter: nft_set_rbtree: validate open interval overlap", "id": "2451243", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451243"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-1288", "details": ["A flaw was found in the Linux kernel's netfilter subsystem, specifically within the `nft_set_rbtree` component. This vulnerability arises from improper validation of open intervals, particularly when an open interval is at the end of a set of network filter rules. An attacker could potentially craft specific network filter rules that, when processed, lead to incorrect handling of existing rules, causing spurious errors (EEXIST) when adding new elements. This could result in unexpected network behavior or a denial of service condition."], "name": "CVE-2026-23333", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-03-25T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-23333\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-23333\nhttps://lore.kernel.org/linux-cve-announce/2026032533-CVE-2026-23333-417f@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7c84d41416d836ef7e533bd4d64ccbdf40c5ac70,6db2be971e3d70c9e3f85d39eff7103c2ee2f579)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.6"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.6)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.19.4,6.19.*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "analysis": {"en": {"generated_at": "2026-04-03T18:30:52.650155+00:00", "value": {"mitigation_remediation": ["Update the Linux kernel to a version that contains the nft_set_rbtree open\u2011interval validation patch (commit 648946966a08e4cb1a71619e3d1b12bd7642de7b).", "Verify the current kernel version and confirm that the patch has been applied if you are running a newer stable release.", "If an immediate kernel upgrade cannot be performed, avoid creating nft_set rules that include open intervals until the kernel is patched, to prevent potential rule conflicts or misconfigurations."], "summary": {"action": "Assess Impact", "impact": "Rule set manipulation"}, "threat_synthesis": {"affected_systems": "All Linux kernel implementations that include nftables and are running a kernel build before the patch that adds the proper open\u2011interval validation. The affected vendor is Linux, as listed in the CNA data, and the problem applies to any kernel version that contains the unpatched nft_set_rbtree logic; the specific versions are not enumerated in the advisory.", "description_and_impact": "The vulnerability arises from a flaw in the nft_set red\u2011black tree code, where open intervals that lack an explicit end element are not properly validated against existing intervals. This omission can cause the kernel to miss a partial overlap between a new interval\u2019s start and an existing interval\u2019s start, potentially allowing a misuse of the nftables rule set to accept duplicate or incorrect entries. As a result, the integrity of nftables configurations can be compromised, which may lead to unintended packet filtering behavior or rule addition failures, but no direct remote code execution or memory corruption is disclosed.", "risk_and_exploitability": "The advisory assigns a CVSS score of 5.5, indicating moderate severity, and an EPSS score of less than 1\u202f%, indicating a low likelihood of exploitation. The vulnerability is not present in the CISA KEV catalog. Based on the nature of the code changes, the attack vector is inferred to be local or privileged, requiring the ability to modify nftables rule sets. The exploitability is limited by the need for direct interaction with the kernel\u2019s nft_set implementation, and no evidence of a publicly available exploitation method is provided."}}}}, "created": "2026-03-25T21:32:20.568202+00:00", "updated": "2026-04-03T21:18:05.894327+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}