Double Hook Unregistration Vulnerability in netfilter: nf_tables
Summary
GSD-2022-1002872: netfilter: nf_tables: double hook unregistration in netns path. Affects Kernel versions >= 767d1216bff82507c945e92fe719dff2083bb2f4, < 86c0154f4c3a56c5db8b9dd09e3ce885382c2c19. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The netfilter package is a part of the Linux Kernel and provides a framework for packet filtering and network address translation. It includes various modules, such as nf_tables, which is responsible for managing packet filtering rules. The nf_tables module allows users to define and manipulate firewall rules and perform network traffic filtering. However, a vulnerability has been discovered in nf_tables that allows for double hook unregistration in the netns path.
Vulnerability Detail
The double hook unregistration vulnerability in nf_tables occurs when a hook is unregistered twice in the netns (network namespace) path. This vulnerability can be exploited by an attacker to bypass firewall rules and potentially execute malicious code or perform unauthorized network activities. The impact and attack plausibility of this vulnerability have not yet been proven, but it is important to address it to ensure the security of the system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The double hook unregistration vulnerability in nf_tables can potentially allow attackers to bypass firewall rules and execute malicious code. It is crucial to update the Linux Kernel to version v5.18.2 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
nf_tables is a module in the netfilter package of the Linux Kernel that provides a framework for packet filtering and network address translation.
The impact of this vulnerability is not yet proven, but it could potentially allow an attacker to bypass firewall rules and execute malicious code or perform unauthorized network activities.
To fix this vulnerability, update the Linux Kernel to version v5.18.2 or later, which includes the necessary fix for the double hook unregistration issue in nf_tables.
No specific workaround has been mentioned for this vulnerability.
For more details about this vulnerability, refer to the provided references link in the vulnerability details section.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
