Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject mismatching sum of field_len with set key length The field length description provides the length of each separated key field in the concatenation, each field gets rounded up to 32-bits to calculate the pipapo rule width from pipapo_init(). The set key length provides the total size of the key aligned to 32-bits. Register-based arithmetics still allows for combining mismatching set key length and field length description, eg. set key length 10 and field description [ 5, 4 ] leading to pipapo width of 12.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 2d4c0798a1ef8db15b3277697ac2def4eda42312 before 6b467c8feac759f4c5c86d708beca2aa2b29584f; affected 77be8c495a3f841e88b46508cc20d3d7d3289da3 before 5083a7ae45003456c253e981b30a43f71230b4a3; affected 9cb084df01e198119de477ac691d682fb01e80f3 before 2ac254343d3cf228ae0738b2615fedf85d000752; affected dc45bb00e66a33de1abb29e3d587880e1d4d9a7e before 82e491e085719068179ff6a5466b7387cc4bbf32; affected 3ce67e3793f48c1b9635beb9bb71116ca1e51b58 before 49b7182b97bafbd5645414aff054b4a65d05823d; affected 3ce67e3793f48c1b9635beb9bb71116ca1e51b58 before ab50d0eff4a939d20c37721fd9766347efcdb6f6; affected 3ce67e3793f48c1b9635beb9bb71116ca1e51b58 before 1b9335a8000fb70742f7db10af314104b6ace220; affected ff67e3e488090908dc015ba04d7407d8bd467f7e; affected 5.10.209 before 5.10.235; affected 5.15.148 before 5.15.179; affected 6.1.75 before 6.1.129; affected 6.6.14 before 6.6.76; affected 6.7.2 before 6.8 |
| Linux / Linux | affected 6.8; unaffected 0 before 6.8; unaffected 5.10.235 through 5.10.*; unaffected 5.15.179 through 5.15.*; unaffected 6.1.129 through 6.1.*; unaffected 6.6.76 through 6.6.*; unaffected 6.12.13 through 6.12.*; unaffected 6.13.2 through 6.13.*; unaffected 6.14 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/6b467c8feac759f4c5c86d708beca2aa2b29584f
- https://git.kernel.org/stable/c/5083a7ae45003456c253e981b30a43f71230b4a3
- https://git.kernel.org/stable/c/2ac254343d3cf228ae0738b2615fedf85d000752
- https://git.kernel.org/stable/c/82e491e085719068179ff6a5466b7387cc4bbf32
- https://git.kernel.org/stable/c/49b7182b97bafbd5645414aff054b4a65d05823d
- https://git.kernel.org/stable/c/ab50d0eff4a939d20c37721fd9766347efcdb6f6
- https://git.kernel.org/stable/c/1b9335a8000fb70742f7db10af314104b6ace220
ADP enrichment
No English description supplied.
No English description supplied.