The vulnerabilities of the parameters NF_SYSCTL_CT_MAX, NF_SYSCTL_CT_EXPECT_MAX, and NF_SYSCTL_CT_BUCKETS in the Linux kernel’s net/netfilter/nf_conntrack_standalone.c component allow attackers to disclose protected information.

The vulnerabilities of the parameters NFSYSCTLCTMAX, NFSYSCTLCTEXPECTMAX, and NFSYSCTLCTBUCKETS in the Linux kernel’s net/netfilter/nfconntrackstandalone.c component are related to the disclosure of information through non-compliance. Exploiting these vulnerabilities can allow attackers to disclo...

AZL-6593 CVE-2021-38209 affecting package kernel for versions less than 5.10.78.1-1

net/netfilter/nfconntrackstandalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net namespace because these changes are leaked into all other net namespaces. This is related to the NFSYSCTLCTMAX, NFSYSCTLCTEXPECTMAX, and NFSYSCTLCTBUCKETS sysctls...