Lucene search

LinuxVULNRICHMENT:CVE-2024-39504

HistoryJul 12, 2024 - 12:20 p.m.

CVE-2024-39504 netfilter: nft_inner: validate mandatory meta and payload

2024-07-1212:20:36

Linux

github.com

linux kernel

netfilter

vulnerability

validation

null pointer

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_inner: validate mandatory meta and payload

Check for mandatory netlink attributes in payload and meta expression
when used embedded from the inner expression, otherwise NULL pointer
dereference is possible from userspace.

References

git.kernel.org/stable/c/39323f54cad29602917848346c71b087da92a19d

git.kernel.org/stable/c/b30669fdea0ca03aa22995e6c99f7e7d9dee89ff

git.kernel.org/stable/c/c4ab9da85b9df3692f861512fe6c9812f38b7471