← Voltar para CVEs

CVE-2024-42070

MEDIUM

5.5

Descricao

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers register store validation for NFT_DATA_VALUE is conditional, however, the datatype is always either NFT_DATA_VALUE or NFT_DATA_VERDICT. This only requires a new helper function to infer the register type from the set datatype so this conditional check can be removed. Otherwise, pointer to chain object can be leaked through the registers.

Detalhes CVE

Pontuacao CVSS v3.15.5

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado7/29/2024

Ultima modificacao11/3/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

linux:linux_kernel

Fraquezas (CWE)

CWE-401

Referencias

https://git.kernel.org/stable/c/23752737c6a618e994f9a310ec2568881a6b49c4(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/40188a25a9847dbeb7ec67517174a835a677752f(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/41a6375d48deaf7f730304b5153848bfa1c2980f(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/461302e07f49687ffe7d105fa0a330c07c7646d8(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/5d43d789b57943720dca4181a05f6477362b94cf(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/7931d32955e09d0a11b1fe0b6aac1bfa061c005c(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/952bf8df222599baadbd4f838a49c4fef81d2564(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/efb27ad05949403848f487823b597ed67060e007(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/23752737c6a618e994f9a310ec2568881a6b49c4(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/40188a25a9847dbeb7ec67517174a835a677752f(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/41a6375d48deaf7f730304b5153848bfa1c2980f(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/461302e07f49687ffe7d105fa0a330c07c7646d8(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/5d43d789b57943720dca4181a05f6477362b94cf(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/7931d32955e09d0a11b1fe0b6aac1bfa061c005c(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/952bf8df222599baadbd4f838a49c4fef81d2564(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/efb27ad05949403848f487823b597ed67060e007(af854a3a-2127-422b-91ae-364da2661108)

https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.