Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memleak when more than 255 elements expired When more than 255 elements expired we're supposed to switch to a new gc container structure. This never happens: u8 type will wrap before reaching the boundary and nft_trans_gc_space() always returns true. This means we recycle the initial gc container structure and lose track of the elements that came before. While at it, don't deref 'gc' after we've passed it to call_rcu.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 8da1b048f9a501d3d7d38c188ba09d7d0d5b8c27 before 7cf055b43756b10aa2b851c927c940f5ed652125; affected bbdb3b65aa91aa0a32b212f27780b28987f2d94f before a995a68e8a3b48533e47c856865d109a1f1a9d01; affected 448be0774882f95a74fa5eb7519761152add601b before 09c85f2d21ab6b5acba31a037985b13e8e6565b8; affected d19e8bf3ea4114dd21fc35da21f398203d7f7df1 before ef99506eaf1dc31feff1adfcfd68bc5535a22171; affected ea3eb9f2192e4fc33b795673e56c97a21987f868 before 7e5d732e6902eb6a37b35480796838a145ae5f07; affected 5f68718b34a531a556f2f50300ead2862278da26 before 4aea243b6853d06c1d160a9955b759189aa02b14; affected 5f68718b34a531a556f2f50300ead2862278da26 before cf5000a7787cbc10341091d37245a42c119d26c5; affected 0624f190b5742a1527cd938295caa8dc5281d4cd; affected 6.4.11 before 6.5 |
| Linux / Linux | affected 6.5; unaffected 0 before 6.5; unaffected 6.5.6 through 6.5.*; unaffected 6.6 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/7cf055b43756b10aa2b851c927c940f5ed652125
- https://git.kernel.org/stable/c/a995a68e8a3b48533e47c856865d109a1f1a9d01
- https://git.kernel.org/stable/c/09c85f2d21ab6b5acba31a037985b13e8e6565b8
- https://git.kernel.org/stable/c/ef99506eaf1dc31feff1adfcfd68bc5535a22171
- https://git.kernel.org/stable/c/7e5d732e6902eb6a37b35480796838a145ae5f07
- https://git.kernel.org/stable/c/4aea243b6853d06c1d160a9955b759189aa02b14
- https://git.kernel.org/stable/c/cf5000a7787cbc10341091d37245a42c119d26c5
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.
- https://git.kernel.org/stable/c/7cf055b43756b10aa2b851c927c940f5ed652125
- https://git.kernel.org/stable/c/a995a68e8a3b48533e47c856865d109a1f1a9d01
- https://git.kernel.org/stable/c/09c85f2d21ab6b5acba31a037985b13e8e6565b8
- https://git.kernel.org/stable/c/ef99506eaf1dc31feff1adfcfd68bc5535a22171
- https://git.kernel.org/stable/c/7e5d732e6902eb6a37b35480796838a145ae5f07
- https://git.kernel.org/stable/c/4aea243b6853d06c1d160a9955b759189aa02b14
- https://git.kernel.org/stable/c/cf5000a7787cbc10341091d37245a42c119d26c5