CVE-2024-39504 netfilter: nft_inner: validate mandatory meta and payload

2024-07-1212:20:36

Linux

www.cve.org

linux kernel

netfilter

vulnerability

validation

fix

netlink attributes

EPSS

Percentile

5.1%

JSON

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_inner: validate mandatory meta and payload

Check for mandatory netlink attributes in payload and meta expression
when used embedded from the inner expression, otherwise NULL pointer
dereference is possible from userspace.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/netfilter/nft_meta.c",
      "net/netfilter/nft_payload.c"
    ],
    "versions": [
      {
        "version": "3a07327d10a0",
        "lessThan": "b30669fdea0c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3a07327d10a0",
        "lessThan": "39323f54cad2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3a07327d10a0",
        "lessThan": "c4ab9da85b9d",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/netfilter/nft_meta.c",
      "net/netfilter/nft_payload.c"
    ],
    "versions": [
      {
        "version": "6.2",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.2",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.35",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.9.6",
        "lessThanOrEqual": "6.9.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.10",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]