netfilter: conntrack: re-fetch conntrack after insertion
Summary
GSD-2022-1003187: netfilter: conntrack: re-fetch conntrack after insertion. Affects Kernel versions >= 71d8c47fc653711c41bc3282e5b0e605b3727956, < 04f9e9104c969d8ce10a4a43634f641ed082092d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The netfilter conntrack module is a component of the Linux Kernel that provides connection tracking functionality. It keeps track of network connections and their associated state information. This module is responsible for maintaining the state of network connections and is used by various network-related applications and services. The conntrack module allows the kernel to track the state of network connections, such as TCP connections, UDP flows, and ICMP sessions. It is an essential component for network security and network address translation (NAT) functionality.
Vulnerability Detail
The vulnerability identified as GSD-2022-1003187 in the conntrack module of the netfilter subsystem allows an attacker to bypass certain security measures by re-fetching conntrack information after insertion. This vulnerability was introduced in Linux Kernel version 4.7 by commit 71d8c47fc653711c41bc3282e5b0e605b3727956 and is fixed in version 5.17.13 by commit 04f9e9104c969d8ce10a4a43634f641ed082092d. The impact and attack plausibility of this vulnerability have not been proven yet, but it has the potential to compromise the integrity and security of network connections.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability at the moment.
Conclusion
The netfilter conntrack vulnerability identified as GSD-2022-1003187 poses a potential risk to the security and integrity of network connections. It is recommended to update the Linux Kernel to version 5.17.13 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The netfilter conntrack module is a component of the Linux Kernel that provides connection tracking functionality. It keeps track of network connections and their associated state information.
The impact of this vulnerability is not yet proven, but it has the potential to compromise the integrity and security of network connections.
To fix this vulnerability, it is recommended to update the Linux Kernel to version 5.17.13 or later.
There is no known workaround for this vulnerability at the moment.
For more information about this vulnerability, you can refer to the vulnerability details in the GSD database (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1003xxx/GSD-2022-1003187.json).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
