Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() nf_osf_find() incorrectly returns true on mismatch, this leads to copying uninitialized memory area in nft_osf which can be used to leak stale kernel stack data to userspace.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 22c7652cdaa8cd33ce78bacceb4e826a3f795873 before 721ea8ac063d70c2078c4e762212705de6151764; affected 22c7652cdaa8cd33ce78bacceb4e826a3f795873 before 5d75fef3e61e797fab5c3fbba88caa74ab92ad47; affected 22c7652cdaa8cd33ce78bacceb4e826a3f795873 before 816eab147e5c6f6621922b8515ad9010ceb1735e; affected 22c7652cdaa8cd33ce78bacceb4e826a3f795873 before 633c81c0449663f57d4138326d036dc6cfad674e; affected 22c7652cdaa8cd33ce78bacceb4e826a3f795873 before 559c36c5a8d730c49ef805a72b213d3bba155cc8 |
| Linux / Linux | affected 5.2; unaffected 0 before 5.2; unaffected 5.4.215 through 5.4.*; unaffected 5.10.146 through 5.10.*; unaffected 5.15.71 through 5.15.*; unaffected 5.19.12 through 5.19.*; unaffected 6.0 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/721ea8ac063d70c2078c4e762212705de6151764
- https://git.kernel.org/stable/c/5d75fef3e61e797fab5c3fbba88caa74ab92ad47
- https://git.kernel.org/stable/c/816eab147e5c6f6621922b8515ad9010ceb1735e
- https://git.kernel.org/stable/c/633c81c0449663f57d4138326d036dc6cfad674e
- https://git.kernel.org/stable/c/559c36c5a8d730c49ef805a72b213d3bba155cc8
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.
- https://git.kernel.org/stable/c/721ea8ac063d70c2078c4e762212705de6151764
- https://git.kernel.org/stable/c/5d75fef3e61e797fab5c3fbba88caa74ab92ad47
- https://git.kernel.org/stable/c/816eab147e5c6f6621922b8515ad9010ceb1735e
- https://git.kernel.org/stable/c/633c81c0449663f57d4138326d036dc6cfad674e
- https://git.kernel.org/stable/c/559c36c5a8d730c49ef805a72b213d3bba155cc8