kernel: netfilter: tproxy: bail out if IP has been disabled on the device

A flaw was found in the Linux kernel's netfilter transparent proxy tproxy component. When IPv4 networking is disabled on a network device, the kernel fails to verify device pointers before processing network traffic. A local attacker can exploit this issue to trigger a null-pointer dereference,...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: tcp: fix a signed-integer-overflow bug in tcpaddbacklog CVE-2022-50865 In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline...

CVE-2024-36270 netfilter: tproxy: bail out if IP has been disabled on the device

In the Linux kernel, the following vulnerability has been resolved: netfilter: tproxy: bail out if IP has been disabled on the device syzbot reports: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 1 PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range...