CVE-2024-1085 Use-after-free in Linux kernel's netfilter: nf_tables component

A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. The nftsetelemcatchalldeactivate function checks whether the catch-all set element is active in the current generation instead of the next generation before...

CVE-2024-1085

CVE-2024-1085 is a Linux kernel nf_tables use-after-free vulnerability that can enable local privilege escalation. The issue stems from nft_setelem_catchall_deactivate() freeing a catch-all set element based on the current generation, while it is only marked inactive for the next generation, allo...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a confusion in the instructions responsible for freeing memory in the netfilter: nftables component. An...

Linux kernel resource management error vulnerability

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which stems from a post-release reuse in the netfilter: nftables component, where the nftsetelemcatchalldeactivate function may lead to a double...

CLSA-2024-1706617379 Fix of 12 CVEs

Jammy update: v5.15.140 upstream stable release LP: 2050038 // CVE-url: https://ubuntu.com/security/CVE-2024-0607 - netfilter: nftables: fix pointer math issue in nftbyteordereval CVE-url: https://ubuntu.com/security/CVE-2024-0607 - netfilter: nftables: Introduce new 64-bit helper register...

CLSA-2024-1706546252 Fix of 10 CVEs

CVE-url: https://ubuntu.com/security/CVE-2022-36402 - drm/vmwgfx: Add support for SVGA3dCmdDefineGBSurfacev3 - drm/vmwgfx: Add SM41 flag - drm/vmwgfx: Add CAP2 support in vmwgfx - drm/vmwgfx: Bump version patchlevel and date - drm/vmwgfx: Expose SM41 param to user space - drm/vmwgfx: Update the...

CLSA-2024-1706545934 Fix of 10 CVEs

CVE-url: https://ubuntu.com/security/CVE-2022-36402 - drm/vmwgfx: Add support for SVGA3dCmdDefineGBSurfacev3 - drm/vmwgfx: Add SM41 flag - drm/vmwgfx: Add CAP2 support in vmwgfx - drm/vmwgfx: Bump version patchlevel and date - drm/vmwgfx: Expose SM41 param to user space - drm/vmwgfx: Update the...

Kernel: nf_tables: pointer math issue in nft_byteorder_eval()

...

kernel: use after free in nft_immediate_deactivate

A use-after-free flaw was found in the Linux kernel's netfilter: nftables component, which can be exploited to achieve local privilege escalation. On an error when building a nftables rule, deactivating immediate expressions in nftimmediatedeactivate can unbind the chain and objects can be...

Ubuntu 22.04 LTS / 23.10 : Linux kernel vulnerabilities (USN-6608-1)

The remote Ubuntu 22.04 LTS / 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6608-1 advisory. It was discovered that the CIFS network file system implementation in the Linux kernel did not properly validate the server frame size in certain...

Debian dla-3711 : linux-config-5.10 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3711 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3711-1 [email protected]...

EulerOS Virtualization 3.0.6.0 : kernel (EulerOS-SA-2023-3434)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A use-after-free flaw was found in net/sched/clsfw.c in classifiers clsfw, clsu32, and clsroute in the Linux Kernel. This flaw allo...

EulerOS 2.0 SP8 : kernel (EulerOS-SA-2023-3132)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free flaw was found in net/sched/clsfw.c in classifiers clsfw, clsu32, and clsroute in the Linux Kernel. This flaw allows a local...

CVE-2023-6040

An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 netfilter: nftables: Reject tables of unsupported family; While creating a new netfilter table, lack of a safeguard against invalid nftables family pf values within nftablesnewtable function enables ...

CVE-2023-6040 An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family)

An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 netfilter: nftables: Reject tables of unsupported family; While creating a new netfilter table, lack of a safeguard against invalid nftables family pf values within nftablesnewtable function enables ...

CVE-2023-6040

CVE-2023-6040 is an out-of-bounds access in the Linux kernel netfilter nf_tables code. The issue arises when creating a new nf_tables table with an invalid nf_tables family value (pf), leading to out-of-bounds access in nf_tables_newtable. The vulnerability is classified as LOCAL with high impact...

CVE-2023-6040 An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family)

An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 netfilter: nftables: Reject tables of unsupported family; While creating a new netfilter table, lack of a safeguard against invalid nftables family pf values within nftablesnewtable function enables ...

CVE-2023-6040

An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 netfilter: nftables: Reject tables of unsupported family; While creating a new netfilter table, lack of a safeguard against invalid nftables family pf values within nftablesnewtable function enables ...

CVE-2023-6040

An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 netfilter: nftables: Reject tables of unsupported family; While creating a new netfilter table, lack of a safeguard against invalid nftables family pf values within nftablesnewtable function enables ...

Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerability (USN-6576-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6576-1 advisory. Lonial Con discovered that the netfilter subsystem in the Linux kernel did not properly handle an expired catchall element in some situations, leading to a...