{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2023-53200",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2023-53200",
    "idYear": 2023,
    "status": "PUBLISHED",
    "publishedAt": "2025-09-15T14:21:28.466Z",
    "updatedAt": "2026-05-11T19:40:12.748Z",
    "importedAt": "2026-10-24T01:57:03.413Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "netfilter: x_tables: fix percpu counter block leak on error path when creating new netns",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: x_tables: fix percpu counter block leak on error path when creating new netns\n\nHere is the stack where we allocate percpu counter block:\n\n  +-< __alloc_percpu\n    +-< xt_percpu_counter_alloc\n      +-< find_check_entry # {arp,ip,ip6}_tables.c\n        +-< translate_table\n\nAnd it can be leaked on this code path:\n\n  +-> ip6t_register_table\n    +-> translate_table # allocates percpu counter block\n    +-> xt_register_table # fails\n\nthere is no freeing of the counter block on xt_register_table fail.\nNote: xt_percpu_counter_free should be called to free it like we do in\ndo_replace through cleanup_entry helper (or in __ip6t_unregister_table).\n\nProbability of hitting this error path is low AFAICS (xt_register_table\ncan only return ENOMEM here, as it is not replacing anything, as we are\ncreating new netns, and it is hard to imagine that all previous\nallocations succeeded and after that one in xt_register_table failed).\nBut it's worth fixing even the rare leak.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "71ae0dff02d756e4d2ca710b79f2ff5390029a5f",
              "status": "affected",
              "versionType": "git",
              "lessThan": "e306dbee4c98025a9326386023a12ef4d887e9d1"
            },
            {
              "version": "71ae0dff02d756e4d2ca710b79f2ff5390029a5f",
              "status": "affected",
              "versionType": "git",
              "lessThan": "512b6c4b83c91d007301ea7d7f095d16c3aceacd"
            },
            {
              "version": "71ae0dff02d756e4d2ca710b79f2ff5390029a5f",
              "status": "affected",
              "versionType": "git",
              "lessThan": "3cc9610a87b7dde82f7360dd4eb6c2c27940ed57"
            },
            {
              "version": "71ae0dff02d756e4d2ca710b79f2ff5390029a5f",
              "status": "affected",
              "versionType": "git",
              "lessThan": "0af8c09c896810879387decfba8c942994bb61f5"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "4.2",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "4.2"
            },
            {
              "version": "5.15.100",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.18",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.2.5",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.2.*"
            },
            {
              "version": "6.3",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}