MongoDB mongos Improper Validation of Internal Flags in Queryable Encryption Write Commands on Sharded Clusters

An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are intended to be server-controlled, by sending crafted write commands through the mongos router on a sharded cluster. This can result in...

bpf: Make sure internal and UAPI bpf_redirect flags don't overlap

...

CVE-2024-50163 bpf: Make sure internal and UAPI bpf_redirect flags don't overlap

In the Linux kernel, the following vulnerability has been resolved: bpf: Make sure internal and UAPI bpfredirect flags don't overlap The bpfredirectinfo is shared between the SKB and XDP redirect paths, and the two paths use the same numeric flag values in the ri-flags field specifically,...

kernel: netfilter: nf_tables: do not compare internal table flags on updates

A flaw was found in the Linux kernel's Netfilter nftables subsystem. When handling table updates, the kernel improperly compares internal configuration flags rather than ignoring them. A local user could exploit this flaw by submitting specific table update requests, potentially leading to improp...

kernel: netfilter: nf_tables: do not compare internal table flags on updates

A flaw was found in the Linux kernel's Netfilter nftables subsystem. When handling table updates, the kernel improperly compares internal configuration flags rather than ignoring them. A local user could exploit this flaw by submitting specific table update requests, potentially leading to improp...

SUSE CVE-2024-27065

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not compare internal table flags on updates Restore skipping transaction if table update does not modify flags...