CVE-2023-52581

highpriority · track · 0OT risk · elevatedEPSS 0.003 · 17 %ileDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.26% (17th) EPSS

CVSS 8.4 · high

Is it mine?

89 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memleak when more than 255 elements expired When more than 255 elements expired we're supposed to switch to a new gc container structure. This never happens: u8 type will wrap before reaching the boundary and nft_trans_gc_space() always returns true. This means we recycle the initial gc container structure and lose track of the elements that came before. While at it, don't deref 'gc' after we've passed it to call_rcu.

cvss

Technical severity, 0–10. One row per scoring source.

8.4

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.8–8.4

v3.18.4highAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.16.3mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:Hsecondary · ENISA EU

v3.16.3mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:Hsecondaryexploitability 1 · impact 5.2

v3.15.8mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-401USprimaryCWE-311USCWE-311USCWE-401USCWE-772US

affected products (89)

Products and version ranges known to be affected.

Amazon Linux 2all versionscert_bundDEcpe:/o:amazon:linux_2:-
Broadcom Brocade SANnavall versionscert_bundDEcpe:/a:broadcom:brocade_sannav:-
Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Dell Avamarall versionscert_bundDEcpe:/a:dell:avamar:-
Dell NetWorkerall versionscert_bundDEcpe:/a:dell:networker:-
Dell NetWorker <19.11all versionscert_bundDE
Dell NetWorker virtualall versionscert_bundDEcpe:/a:dell:networker:virtual
Dell PowerProtect Data Domain <7.10.1.70all versionscert_bundDE
Dell PowerProtect Data Domain <7.13.1.40all versionscert_bundDE
Dell PowerProtect Data Domain <8.3.1.10all versionscert_bundDE
Dell PowerProtect Data Domain <8.4.0.0all versionscert_bundDE
EMC Avamarall versionscert_bundDEcpe:/a:emc:avamar:-
IBM Business Automation Workflow 24.0.0all versionscert_bundDEcpe:/a:ibm:business_automation_workflow:24.0.0
IBM QRadar SIEMall versionscert_bundDEcpe:/a:ibm:qradar_siem:-
IBM Security Guardium 12.0all versionscert_bundDEcpe:/a:ibm:security_guardium:12.0
IBM Security Guardium 12.1all versionscert_bundDEcpe:/a:ibm:security_guardium:12.1
IBM Spectrum Protect Plus <10.1.16.3all versionscert_bundDE
IBM Storage Scale <6.1.9.5all versionscert_bundDE
IBM Storage Scale <6.2.2.0all versionscert_bundDE
IBM Storage Scale System <6.1.9.8all versionscert_bundDE

showing 20 of 89

advisories (4)

Vendor and ecosystem advisories describing this.

SSA-613116SSA-613116: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.12025-08-12csaf · siemens_psirtDE
SINEC OS before V3.1 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
WID-SEC-W-2024-0534Linux Kernel: Mehrere SchwachstellenDeutsch2024-03-03csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen oder einen nicht spezifizierten Angriff durchzuführen.
WID-SEC-W-2024-1226Red Hat OpenShift: Mehrere SchwachstellenDeutsch2024-05-22csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder um weitere nicht spezifizierte Angriffe auszuführen.
ICSA-25-226-15Siemens SINEC OS2025-08-12icsa · cisa_csaf_otUS
SINEC OS before V3.1 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund siemens_psirt cisa_csaf_ot NVD CVE.org MITRE

published 2024-03-02modified 2026-06-17

related (3,014)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2023-26083US	low3.3OT critical	1.22% (68th)	KEV	2023-04-06
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall G…
CVE-2021-1906US	medium5.5OT critical	0.52% (44th)	KEV	2021-05-07
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon C…
CVE-2018-0158US	high8.6OT critical	7.19% (94th)	KEV	2018-03-28
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a mem…
CVE-2023-25136US	medium6.5	89.8% (100th)	Exploit	2023-02-03
OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unaut…
CVE-2016-4232US	high7.5	36.5% (98th)	Exploit	2016-07-13
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information f…

+3009 more

references (18)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan