---
id: CVE-2023-42756
title: 'Kernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap'
summary: >-
  A flaw was found in the Netfilter subsystem of the Linux kernel. A race
  condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic
  due to the invocation of `__ip_set_put` on a wrong `set`. This issue may allow
  a local …
severity: medium
cvss: 4.4
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'
cvssSource: cna
cwe:
  - CWE-362
vendor: Red Hat
product: kernel
affected:
  - kernel (all versions)
  - kernel (all versions)
  - kernel
  - kernel
  - kernel-rt
  - kernel
  - kernel-rt
  - kernel-rt (all versions)
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2025-02-27T20:32:17.539570Z'
exploitAvailable: true
published: '2023-09-28'
updated: '2026-11-01'
sourceUpdated: '2026-11-01T10:40:04.501Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2023-42756'
references:
  - url: 'https://access.redhat.com/errata/RHSA-2024:2394'
    label: 'RHSA-2024:2394'
  - url: 'https://access.redhat.com/security/cve/CVE-2023-42756'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2239848'
    label: RHBZ#2239848
  - url: 'https://seclists.org/oss-sec/2023/q3/242'
tags:
  - cve.org
  - exploit-available
epss: 0.00274
epssPercentile: 0.19862
ingestedAt: '2026-11-05T18:28:50.714Z'
---

## Overview

A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic due to the invocation of `__ip_set_put` on a wrong `set`. This issue may allow a local user to crash the system.

## Affected

- `kernel (all versions)`
- `kernel (all versions)`
- `kernel`
- `kernel`
- `kernel-rt`
- `kernel`
- `kernel-rt`
- `kernel-rt (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.