The vulnerability of the nft_trans_gc_{queue_async_done,space}() function in the net/netfilter/nf_tables_api.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

🗓️ 06 Mar 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Memory release errors in the Linux kernel nf_tables_api expose confidentiality, integrity, and availability risks in the nf_tables_api module.

Reporter	Title	Published	Views	Family All 257
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Storage Copy Data Management	27 Sep 202418:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in [All] linux (Kernel) affects IBM Integrated Analytics System.	20 May 202514:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	15 Apr 202502:47	–	ibm
AlmaLinux	Important: kernel security, bug fix, and enhancement update	30 Apr 202400:00	–	almalinux
AlmaLinux	Moderate: kernel-rt security and bug fix update	22 May 202400:00	–	almalinux
AlmaLinux	Moderate: kernel security, bug fix, and enhancement update	22 May 202400:00	–	almalinux
Circl	CVE-2023-52581	14 Aug 202510:00	–	circl
CNNVD	Linux kernel security vulnerabilities	2 Mar 202400:00	–	cnnvd
CVE	CVE-2023-52581	2 Mar 202421:59	–	cve

Vulners

Node

novell suse_manager_retail_branch_serverMatch4.3linux

OR

novell suse_manager_proxyMatch4.3linux

OR

novell suse_linux_enterprise_microMatch5.3linux

OR

novell suse_linux_enterprise_microMatch5.4linux

OR

novell suse_linux_enterprise_microMatch5.5linux

Source	Link
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
git	www.git.kernel.org/linus/cf5000a7787cbc10341091d37245a42c119d26c5
git	www.git.kernel.org/stable/c/09c85f2d21ab6b5acba31a037985b13e8e6565b8
git	www.git.kernel.org/stable/c/4aea243b6853d06c1d160a9955b759189aa02b14
git	www.git.kernel.org/stable/c/7cf055b43756b10aa2b851c927c940f5ed652125
git	www.git.kernel.org/stable/c/7e5d732e6902eb6a37b35480796838a145ae5f07
git	www.git.kernel.org/stable/c/a995a68e8a3b48533e47c856865d109a1f1a9d01
git	www.git.kernel.org/stable/c/cf5000a7787cbc10341091d37245a42c119d26c5
git	www.git.kernel.org/stable/c/ef99506eaf1dc31feff1adfcfd68bc5535a22171

06 Dec 2024 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 27.2

CVSS 38.4

EPSS0.00257

linux kernel net tables api memory error security risk data exposure privacy breach module vulnerability