The vulnerability of the nf_conntrack_hash_check_insert() function in the net/netfilter/nf_conntrack_core.c module of the Linux kernel’s netfilter subsystem allows a hacker to induce a service failure.

The vulnerability of the nfconntrackhashcheckinsert function in the net/netfilter/nfconntrackcore.c module of the netfilter component of the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow a attacker to...

kernel: netfilter: conntrack: fix using __this_cpu_add in preemptible

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: fix using thiscpuadd in preemptible Currently in nfconntrackhashcheckinsert, when it fails in nfctextvalidpre/post, NFCTSTATINC will be called in the preemptible context, a call trace can be triggered: BUG:...