Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-1095
HistoryFeb 28, 2023 - 11:15 p.m.

Null pointer dereference

2023-02-2823:15:00
PRIOn knowledge base
www.prio-n.com
11
nf_tables_updtable
error handling
vulnerability
null pointer dereference
nvd

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list – the list head is all zeroes, this results in a NULL pointer dereference.