Lucene search

LinuxCVE-2024-44983

HistorySep 04, 2024 - 8:15 p.m.

CVE-2024-44983

2024-09-0420:15:07

CWE-908

Linux

web.nvd.nist.gov

linux kernel

vulnerability

cve-2024-44983

netfilter

flowtable

vlan header

validation

resolution

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

AI Score

6.9

Confidence

Low

EPSS

Percentile

5.1%

JSON

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: validate vlan header

Ensure there is sufficient room to access the protocol field of the
VLAN header, validate it once before the flowtable lookup.

=====================================================
BUG: KMSAN: uninit-value in nf_flow_offload_inet_hook+0x45a/0x5f0 net/netfilter/nf_flow_table_inet.c:32
nf_flow_offload_inet_hook+0x45a/0x5f0 net/netfilter/nf_flow_table_inet.c:32
nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]
nf_hook_slow+0xf4/0x400 net/netfilter/core.c:626
nf_hook_ingress include/linux/netfilter_netdev.h:34 [inline]
nf_ingress net/core/dev.c:5440 [inline]

Affected configurations

Nvd

Vulners

Node

linuxlinux_kernelRange5.13–5.15.166

linuxlinux_kernelRange5.16–6.1.107

linuxlinux_kernelRange6.2–6.6.48

linuxlinux_kernelRange6.7–6.10.7

linuxlinux_kernelMatch6.11rc1

linuxlinux_kernelMatch6.11rc2

linuxlinux_kernelMatch6.11rc3

linuxlinux_kernelMatch6.11rc4

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel6.11cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
linuxlinux_kernel6.11cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*
linuxlinux_kernel6.11cpe:2.3:o:linux:linux_kernel:6.11:rc3:*:*:*:*:*:*
linuxlinux_kernel6.11cpe:2.3:o:linux:linux_kernel:6.11:rc4:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	6.11	cpe:2.3:o:linux:linux_kernel:6.11:rc1::::::
linux	linux_kernel	6.11	cpe:2.3:o:linux:linux_kernel:6.11:rc2::::::
linux	linux_kernel	6.11	cpe:2.3:o:linux:linux_kernel:6.11:rc3::::::
linux	linux_kernel	6.11	cpe:2.3:o:linux:linux_kernel:6.11:rc4::::::

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/netfilter/nf_flow_table_inet.c",
      "net/netfilter/nf_flow_table_ip.c"
    ],
    "versions": [
      {
        "version": "4cd91f7c290f",
        "lessThan": "c05155cc4557",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4cd91f7c290f",
        "lessThan": "d9384ae7aec4",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4cd91f7c290f",
        "lessThan": "0279c35d242d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4cd91f7c290f",
        "lessThan": "043a18bb6cf1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "4cd91f7c290f",
        "lessThan": "6ea14ccb60c8",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/netfilter/nf_flow_table_inet.c",
      "net/netfilter/nf_flow_table_ip.c"
    ],
    "versions": [
      {
        "version": "5.13",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.13",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.15.166",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.107",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.48",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.10.7",
        "lessThanOrEqual": "6.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.11",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

References

git.kernel.org/stable/c/0279c35d242d037abeb73d60d06a6d1bb7f672d9

git.kernel.org/stable/c/043a18bb6cf16adaa2f8642acfde6e8956a9caaa

git.kernel.org/stable/c/6ea14ccb60c8ab829349979b22b58a941ec4a3ee

git.kernel.org/stable/c/c05155cc455785916164aa5e1b4605a2ae946537

git.kernel.org/stable/c/d9384ae7aec46036d248d1c2c2757e471ab486c3

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

AI Score

6.9

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2024-44983