Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: drop logically empty buckets in mtype_del mtype_del() counts empty slots below n->pos in k, but it only drops the bucket when both n->pos and k are zero. This misses buckets whose live entries have all been removed while n->pos still points past deleted slots. Treat a bucket as empty when all positions below n->pos are unused and release it directly instead of shrinking it further.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 before c098ff857e7ca923539164af5b3c2fe3e8f8afaf; affected 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 before 58f3a14826d4e6b0d5421f1a64be280b48601ea2; affected 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 before ad92ee87462f9a3061361d392e9dbfe2e5c1c9fb; affected 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 before 6cea34d7ec6829b62f521a37a287f670144a2233; affected 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 before b7eef00f08b92b0b9efe8ae0df6d0005e6199323; affected 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 before 68ca0eea0af02bed36c5e2c13e9fa1647c31a7d4; affected 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 before ceacaa76f221a6577aba945bb8873c2e640aeba4; affected 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 before 9862ef9ab0a116c6dca98842aab7de13a252ae02; affected 6c717726f341fd8f39a3ec2dcf5d98d9d28a2769; affected d2997d64dfa65082236bca1efd596b6c935daf5e; affected 5.4.24 before 5.5; affected 5.5.8 before 5.6 |
| Linux / Linux | affected 5.6; unaffected 0 before 5.6; unaffected 5.10.253 through 5.10.*; unaffected 5.15.203 through 5.15.*; unaffected 6.1.168 through 6.1.*; unaffected 6.6.134 through 6.6.*; unaffected 6.12.81 through 6.12.*; unaffected 6.18.22 through 6.18.*; unaffected 6.19.12 through 6.19.*; unaffected 7.0 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/c098ff857e7ca923539164af5b3c2fe3e8f8afaf
- https://git.kernel.org/stable/c/58f3a14826d4e6b0d5421f1a64be280b48601ea2
- https://git.kernel.org/stable/c/ad92ee87462f9a3061361d392e9dbfe2e5c1c9fb
- https://git.kernel.org/stable/c/6cea34d7ec6829b62f521a37a287f670144a2233
- https://git.kernel.org/stable/c/b7eef00f08b92b0b9efe8ae0df6d0005e6199323
- https://git.kernel.org/stable/c/68ca0eea0af02bed36c5e2c13e9fa1647c31a7d4
- https://git.kernel.org/stable/c/ceacaa76f221a6577aba945bb8873c2e640aeba4
- https://git.kernel.org/stable/c/9862ef9ab0a116c6dca98842aab7de13a252ae02
ADP enrichment
No English description supplied.