netfilter: nftables: Fix a memleak from userdata error path in new objects
Summary
GSD-2021-1000209: netfilter: nftables: Fix a memleak from userdata error path in new objects. Affects Kernel versions >= b131c96496b369c7b14125e7c50e89ac7cec8051, < dd3bebf515f336214a91994348a2b86b9a1d3d7f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The netfilter package is a part of the Linux Kernel ecosystem and provides a framework for packet filtering and network address translation. It includes various components, including nftables, which is a subsystem for packet filtering and classification. nftables allows users to define firewall rules and perform network traffic manipulation. However, a vulnerability has been identified in nftables that could lead to a memory leak issue.
Vulnerability Detail
The vulnerability in nftables is related to a memory leak that occurs in the error path of new objects when userdata is involved. This can result in a gradual depletion of system memory, potentially leading to resource exhaustion and system instability. The vulnerability was introduced in Linux Kernel version v5.10 and has been fixed in version v5.12.5. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in nftables that causes a memory leak has been addressed in Linux Kernel version v5.12.5. It is recommended to update the kernel to this version or later to mitigate the risk of resource exhaustion and system instability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Netfilter is a packet filtering framework within the Linux Kernel ecosystem, while nftables is a subsystem of netfilter that allows users to define firewall rules and manipulate network traffic.
The vulnerability can result in a memory leak, leading to gradual depletion of system memory and potential resource exhaustion.
To fix this vulnerability, update the Linux Kernel to version v5.12.5 or later.
No specific workaround has been mentioned for this vulnerability.
The updated Linux Kernel can be obtained from the official Linux Kernel repository.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
