The Linux kernel’s nft_set_rbtree component lacks protection against adding two intervals with overlapping start points to anonymous sets. This oversight, a CWE‑1288 (Partial Overlap) flaw, allows a user to insert conflicting ranges. The nftables engine may then incorrectly match or drop packets, resulting in a firewall rule bypass or a denial‑of‑service condition where legitimate traffic fails to traverse the intended paths.

All Linux kernel installations that include the nft_set_rbtree implementation, up to the release that incorporates the fix. No specific kernel versions are enumerated in the advisory, so the vulnerability potentially spans the current stable kernel releases until the patch is applied.

Exploitation requires the ability to add custom nftables rules, which typically demands CAP_NET_ADMIN or root privileges. With a CVSS score of 5.5, the vulnerability is considered moderate, though its severity is tempered by an EPSS score of < 1%, indicating a low likelihood of exploitation. The vulnerability is not listed in CISA KEV. The likely attack vector involves a privileged user configuring nftables rules with overlapping anonymous intervals, which can lead to firewall rule bypass or unintended packet drops.