Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: walk over current view on netlink dump The generation mask can be updated while netlink dump is in progress. The pipapo set backend walk iterator cannot rely on it to infer what view of the datastructure is to be used. Add notation to specify if user wants to read/update the set. Based on patch from Florian Westphal.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 2a90da8e0dd50f42e577988f4219f4f4cd3616b7 before ff89db14c63a827066446460e39226c0688ef786; affected 45eb6944d0f55102229115de040ef3a48841434a before ce9fef54c5ec9912a0c9a47bac3195cc41b14679; affected 0d836f917520300a8725a5dbdad4406438d0cead before 52735a010f37580b3a569a996f878fdd87425650; affected 2b84e215f87443c74ac0aa7f76bb172d43a87033 before f24d8abc2bb8cbf31ec713336e402eafa8f42f60; affected 2b84e215f87443c74ac0aa7f76bb172d43a87033 before 721715655c72640567e8742567520c99801148ed; affected 2b84e215f87443c74ac0aa7f76bb172d43a87033 before 29b359cf6d95fd60730533f7f10464e95bd17c73; affected f661383b5f1aaac3fe121b91e04332944bc90193; affected 5.10.186 before 5.10.227; affected 5.15.119 before 5.15.168; affected 6.1.36 before 6.1.112; affected 6.3.10 before 6.4 |
| Linux / Linux | affected 6.4; unaffected 0 before 6.4; unaffected 5.10.227 through 5.10.*; unaffected 5.15.168 through 5.15.*; unaffected 6.1.112 through 6.1.*; unaffected 6.6.53 through 6.6.*; unaffected 6.8.8 through 6.8.*; unaffected 6.9 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/ff89db14c63a827066446460e39226c0688ef786
- https://git.kernel.org/stable/c/ce9fef54c5ec9912a0c9a47bac3195cc41b14679
- https://git.kernel.org/stable/c/52735a010f37580b3a569a996f878fdd87425650
- https://git.kernel.org/stable/c/f24d8abc2bb8cbf31ec713336e402eafa8f42f60
- https://git.kernel.org/stable/c/721715655c72640567e8742567520c99801148ed
- https://git.kernel.org/stable/c/29b359cf6d95fd60730533f7f10464e95bd17c73
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.
- https://git.kernel.org/stable/c/721715655c72640567e8742567520c99801148ed
- https://git.kernel.org/stable/c/29b359cf6d95fd60730533f7f10464e95bd17c73
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DAMSOZXJEPUOXW33WZYWCVAY7Z5S7OOY/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCBZZEC7L7KTWWAS2NLJK6SO3IZIL4WW/