Lucene search
K

16 matches found

EUVD
EUVD
added 2026/06/03 3:48 p.m.10 views

EUVD-2026-34106

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftinner: Fix IPv6 innerthoff desync In nftinnerparsel2l3, when processing inner IPv6 packets, ipv6findhdr correctly computes the transport header offset traversing all extension headers, but the result is immediately...

5.8AI score0.00392EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/06/03 3:48 p.m.46 views

CVE-2026-46244 netfilter: nft_inner: Fix IPv6 inner_thoff desync

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftinner: Fix IPv6 innerthoff desync In nftinnerparsel2l3, when processing inner IPv6 packets, ipv6findhdr correctly computes the transport header offset traversing all extension headers, but the result is immediately...

9.1CVSS0.00392EPSS
Exploits0References5
CVE
CVE
added 2026/06/03 3:48 p.m.74 views

CVE-2026-46244

The CVE-2026-46244 issue affects the Linux kernel netfilter nft_inner path. In nft_inner_parse_l2l3(), while handling inner IPv6 packets, ipv6_find_hdr() computes the transport header offset correctly across extension headers, but the code later overwrites this value with nhoff + sizeof(_ip6h) (4...

9.1CVSS5.8AI score0.00392EPSS
Exploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/06/03 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-46244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftinner: Fix IPv6 innerthoff desync In nftinnerparsel2l3, when processing inner IPv6 packets, ipv6findhdr correctly computes the transport header...

9.1CVSS5.9AI score0.00392EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/01/12 12:14 a.m.5 views

SUSE CVE-2024-56638

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftinner: incorrect percpu area handling under softirq Softirq can interrupt ongoing packet from process context that is walking over the percpu area that contains inner header offsets. Disable bh and perform three...

5.3CVSS7.7AI score0.00222EPSS
Exploits0References15
BDU FSTEC
BDU FSTEC
added 2024/12/11 12:0 a.m.3 views

The vulnerability of the nft_inner component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the nftinner component in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00272EPSS
Exploits0References22Affected Software6
RedHat Linux
RedHat Linux
added 2024/10/30 1:41 a.m.0 views

kernel: netfilter: nft_inner: validate mandatory meta and payload

A vulnerability was found in the Linux kernel's Netfilter subsystem in the nftinner component, where the issue occurs when mandatory netlink attributes for payload and meta expressions are not validated in embedded inner expressions, which can lead to a NULL pointer dereference from user space...

5.5CVSS7.2AI score0.00272EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2024/07/16 2:35 a.m.4 views

SUSE CVE-2024-39504

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftinner: validate mandatory meta and payload Check for mandatory netlink attributes in payload and meta expression when used embedded from the inner expression, otherwise NULL pointer dereference is possible from...

4.4CVSS6.8AI score0.00272EPSS
Exploits0References11
OSV
OSV
added 2024/07/12 1:15 p.m.1 views

DEBIAN-CVE-2024-39504

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftinner: validate mandatory meta and payload Check for mandatory netlink attributes in payload and meta expression when used embedded from the inner expression, otherwise NULL pointer dereference is possible from...

5.5CVSS5.6AI score0.00272EPSS
Exploits0References1
OSV
OSV
added 2024/07/12 1:15 p.m.2 views

UBUNTU-CVE-2024-39504

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftinner: validate mandatory meta and payload Check for mandatory netlink attributes in payload and meta expression when used embedded from the inner expression, otherwise NULL pointer dereference is possible from...

5.5CVSS6.1AI score0.00272EPSS
Exploits0References13
CNNVD
CNNVD
added 2024/07/12 12:0 a.m.2 views

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure of the netfilter:nftinner component to properly validate the mandatory netlink attribute...

5.5CVSS8.6AI score0.00272EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2023/11/23 6:15 p.m.10 views

CVE-2023-5972

A null pointer dereference flaw was found in the nftinner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system...

7.8CVSS5.8AI score0.00276EPSS
Exploits0References5
OSV
OSV
added 2023/11/23 6:15 p.m.4 views

AZL-32062 CVE-2023-5972 affecting package hyperv-daemons for versions less than 5.15.143.1-1

A null pointer dereference flaw was found in the nftinner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system...

7.8CVSS6.6AI score0.00276EPSS
Exploits0References1
OSV
OSV
added 2023/11/23 6:15 p.m.2 views

UBUNTU-CVE-2023-5972

A null pointer dereference flaw was found in the nftinner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system...

7.8CVSS6.5AI score0.00276EPSS
Exploits0References9
CNNVD
CNNVD
added 2023/11/23 12:0 a.m.2 views

Linux kernel code issue vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a code issue vulnerability that stems from a null pointer dereference flaw found in netfilter's nftinner.c, which causes a system crash. An attacker...

7.8CVSS6.6AI score0.00276EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/11/23 12:0 a.m.8 views

PT-2023-7267 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a null pointer dereference flaw in the nft inner.c functionality of netfilter in the Linux kernel. This flaw could allow a local user to crash the system or...

7.8CVSS7.5AI score0.12836EPSS
Exploits9References63
Rows per page
Query Builder