Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missing a call to the nf_expect_get_id() helper function to calculate the expectation ID, otherwise LSB of the expectation object address is leaked to userspace.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 7b115755fb9d3aff0ddcd18a5c4d83381362acce before 66e7650dbbb8e236e781c670b167edc81e771450; affected 3c79107631db1f7fd32cf3f7368e4672004a3010 before 64c0b8e64be8368617ef08dfc59a3160563a1435; affected 3c79107631db1f7fd32cf3f7368e4672004a3010 before eb4ca1a97e08ff5b920664ba292e576257e2d184; affected 3c79107631db1f7fd32cf3f7368e4672004a3010 before 5e2c24f7b0911b15c29aefce760bcf770542fb61; affected 3c79107631db1f7fd32cf3f7368e4672004a3010 before 24f407042cf90b0872de667460230d8d50c06c39; affected 3c79107631db1f7fd32cf3f7368e4672004a3010 before 27662b46f2adaa52c1665a82af4b21c42c4337fd; affected 3c79107631db1f7fd32cf3f7368e4672004a3010 before 74de442b8e12a207c07953ee068009a7701aff8f; affected 3c79107631db1f7fd32cf3f7368e4672004a3010 before 782161895eb4ac45cf7cfa8db375bd4766cb8299; affected 3d8b3d0384f709126beef6b917b7e97c23f18e74; affected 36bbd861a402a8c5bd8f0365a5967d34cc492f09; affected 1922476beeeea46bebbe577215078736dd4231dc; affected f862c13c3c926d3008b2c2bcc746ab813108dfbf; affected b0a90cae081d7ee14eaa46524fb70f4e23ae8905; affected 4.19.44 before 4.19.320; affected 3.16.72 before 3.17; affected 4.4.191 before 4.5; affected 4.9.190 before 4.10; affected 4.14.120 before 4.15; affected 5.0.17 before 5.1 |
| Linux / Linux | affected 5.1; unaffected 0 before 5.1; unaffected 4.19.320 through 4.19.*; unaffected 5.4.282 through 5.4.*; unaffected 5.10.224 through 5.10.*; unaffected 5.15.165 through 5.15.*; unaffected 6.1.103 through 6.1.*; unaffected 6.6.44 through 6.6.*; unaffected 6.10.3 through 6.10.*; unaffected 6.11 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/66e7650dbbb8e236e781c670b167edc81e771450
- https://git.kernel.org/stable/c/64c0b8e64be8368617ef08dfc59a3160563a1435
- https://git.kernel.org/stable/c/eb4ca1a97e08ff5b920664ba292e576257e2d184
- https://git.kernel.org/stable/c/5e2c24f7b0911b15c29aefce760bcf770542fb61
- https://git.kernel.org/stable/c/24f407042cf90b0872de667460230d8d50c06c39
- https://git.kernel.org/stable/c/27662b46f2adaa52c1665a82af4b21c42c4337fd
- https://git.kernel.org/stable/c/74de442b8e12a207c07953ee068009a7701aff8f
- https://git.kernel.org/stable/c/782161895eb4ac45cf7cfa8db375bd4766cb8299
- https://www.zerodayinitiative.com/advisories/ZDI-24-1182/
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.
No English description supplied.