GSD-2021-1000015 netfilter: nftables: clone set element expression template

netfilter: nftables: clone set element expression template This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.16 by commit...

nftables bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

nftables bug fix and enhancement update

An update is available for nftables. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...

PT-2024-11097 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0-rc7-syzkaller Description: The vulnerability is related to netfilter: nftables, where overflows can occur in nft hash buckets due to the number of buckets being stored in 32-bit variables. This issue was...

PT-2024-11101 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been resolved in the Linux kernel, specifically in the netfilter: nftables component. The issue occurred when userdata allocation failed in the error path of ne...

PT-2021-8025 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the netfilter component of the Linux kernel, specifically with the nftables subsystem. It occurs when using connlimit in set elements, causing the memcp...

Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork (important)

openSUSE Security Update: Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork Announcement ID: openSUSE-SU-2021:0278-1 Rating: important References: 1174075 1176708 1178801 1178969 1180243 1180401 1181730 1181732 Cross-References: CVE-2020-15257 CVE-2021-21284...

nftables bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

To bypass nftables/PacketFilter firewall filtering rules, transmit the ICMP/ICMPv6 packet vulnerability details the following-a vulnerability warning-the black bar safety net

On an article, we of the firewall filter rules and ICMP/ICMPv6 data packet transmission process made a full introduction to the anatomy which may occur attack risk. Herein I will detail the parsing of a malicious data packet to be transmitted. Nftables implementation and details Linux is in the...

To bypass nftables/PacketFilter firewall filtering rules, transmit the ICMP/ICMPv6 packet vulnerability details the on-vulnerability warning-the black bar safety net

Background knowledge introduction Currently the firewall has a total of four categories: Packet filtering firewall: packet filtering firewall does not check data area, a packet filtering firewall does not establish a connection State table before and after the packet-independent, application-laye...

kernel: panic while flushing nftables rules that reference deleted chains.

A flaw was found in the way the nftflushtable function of the Linux kernel's netfilter tables implementation flushed rules that were referencing deleted chains. A local user who has the CAPNETADMIN capability could use this flaw to crash the system...

kernel: panic while flushing nftables rules that reference deleted chains.

A flaw was found in the way the nftflushtable function of the Linux kernel's netfilter tables implementation flushed rules that were referencing deleted chains. A local user who has the CAPNETADMIN capability could use this flaw to crash the system...