In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix underflow in chain reference counter Set element addition error path decrements reference counter on chains twice: once on element release and again via nft_data_release(). Then, d6b478666ffa ("netfilter: nf_tables: fix underflow in object reference counter") incorrectly fixed this by removing the stateful object reference count decrement. Restore the stateful object decrement as in b91d90368837 ("netfilter: nf_tables: fix leaking object reference count") and let nft_data_release() decrement the chain reference counter, so this is done only once.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix underflow in
    chain reference counter Set element addition error path decrements reference counter on chains twice: once
    on element release and again via nft_data_release(). Then, d6b478666ffa ("netfilter: nf_tables: fix
    underflow in object reference counter") incorrectly fixed this by removing the stateful object reference
    count decrement. Restore the stateful object decrement as in b91d90368837 ("netfilter: nf_tables: fix
    leaking object reference count") and let nft_data_release() decrement the chain reference counter, so this
    is done only once. (CVE-2023-54035)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - netfilter: nf_tables: fix underflow in chain reference counter Set element addition error path decrements     reference counter on chains twice: once on element release and again via nft_data_release(). Then,     d6b478666ffa (netfilter: nf_tables: fix underflow in object reference counter) incorrectly fixed this by     removing the stateful object reference count decrement. Restore the stateful object decrement as in     b91d90368837 (netfilter: nf_tables: fix leaking object reference count) and let nft_data_release()     decrement the chain reference counter, so this is done only once. (CVE-2023-54035)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
450593	Google: sys-kernel/lakitu-kernel-6_1: security update to 17819.0.0	Tenable Cloud Security	Google COS Security Checks	Local	high
450593	Google: sys-kernel/lakitu-kernel-6_1: security update to 17819.0.0	Tenable Self-Hosted Container Security	Google COS Security Checks	Local	high
297194	SUSE SLED15 / SLES15 : Security update for the Linux Kernel (SUSE-SU-2026:0315-1)	Nessus	SuSE Local Security Checks	Local	high
296680	SUSE SLES15 / openSUSE 15 : Security update for the Linux Kernel (SUSE-SU-2026:0293-1)	Nessus	SuSE Local Security Checks	Local	high
296676	SUSE SLES15: kernel-azure / kernel-azure-devel / kernel-devel-azure / etc (SUSE-SU-2026:0281-1)	Nessus	SuSE Local Security Checks	Local	high
296481	SUSE SLES15 Security Update : kernel (SUSE-SU-2026:0278-1)	Nessus	SuSE Local Security Checks	Local	high
279781	Linux Distros Unpatched Vulnerability : CVE-2023-54035	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2023-54035

high

Tenable Plugins

high

high

high

high

high

high

high