CVE-2024-42269

Summary

In the Linux kernel, the following vulnerability has been resolved:

netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().

ip6table_nat_table_init() accesses net->gen->ptr[ip6table_nat_net_ops.id], but the function is exposed to user space before the entry is allocated via register_pernet_subsys().

Let's call register_pernet_subsys() before xt_register_template().

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxfdacd57c79b79a03c7ca88f706ad9fb7b46831c1 < 419ee6274c5153b89c4393c1946faa4c3cad4f9eaffected
LinuxLinuxfdacd57c79b79a03c7ca88f706ad9fb7b46831c1 < 91b6df6611b7edb28676c4f63f90c56c30d3e601affected
LinuxLinuxfdacd57c79b79a03c7ca88f706ad9fb7b46831c1 < e85b9b6a87be4cb3710082038b677e97f2389003affected
LinuxLinuxfdacd57c79b79a03c7ca88f706ad9fb7b46831c1 < 87dba44e9471b79b255d0736858a897332db9226affected
LinuxLinuxfdacd57c79b79a03c7ca88f706ad9fb7b46831c1 < c22921df777de5606f1047b1345b8d22ef1c0b34affected
LinuxLinux5.15affected
LinuxLinux0 < 5.15unaffected
LinuxLinux5.15.165 <= 5.15.*unaffected
LinuxLinux6.1.104 <= 6.1.*unaffected
LinuxLinux6.6.45 <= 6.6.*unaffected
LinuxLinux6.10.4 <= 6.10.*unaffected
LinuxLinux6.11 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References