Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-42269
HistoryAug 17, 2024 - 8:54 a.m.

CVE-2024-42269 netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().

2024-08-1708:54:24
Linux
github.com
2
linux kernel vulnerability resolved netfilter iptables ip6table_nat_table_init user space register_pernet_subsys xt_register_template.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().

ip6table_nat_table_init() accesses net->gen->ptr[ip6table_nat_net_ops.id],
but the function is exposed to user space before the entry is allocated
via register_pernet_subsys().

Let’s call register_pernet_subsys() before xt_register_template().

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial