Double Hook Unregistration in netns Path in Linux Kernel
Summary
GSD-2022-1003188: netfilter: nf_tables: double hook unregistration in netns path. Affects Kernel versions >= 767d1216bff82507c945e92fe719dff2083bb2f4, < a3940dcf552f2393d1e8f263b386593f98abe829. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is the core component of the Linux operating system, responsible for managing system resources and providing essential services to applications. It is a critical piece of software that interacts directly with hardware and provides an interface for higher-level software to access system resources. The netfilter subsystem within the Linux Kernel is responsible for packet filtering, network address translation, and other network-related operations. It includes the nf_tables framework, which provides a flexible and efficient way to define and manipulate firewall rules. However, a vulnerability has been discovered in the nf_tables framework that allows for double hook unregistration in the netns path.
Vulnerability Detail
The vulnerability in the nf_tables framework allows an attacker to unregister a hook twice in the netns path, leading to a use-after-free condition. This can be exploited to execute arbitrary code with kernel privileges or cause a denial-of-service by crashing the system. The vulnerability was introduced in Linux Kernel version 5.11 and is fixed in version 5.17.13. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version 5.17.13 or later. This can be done by downloading the latest kernel source code from the official Linux Kernel Git repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/) and compiling it according to the provided instructions. Alternatively, users can wait for their Linux distribution to release an updated kernel package and install it through the package manager.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability at the moment.
Conclusion
The double hook unregistration vulnerability in the nf_tables framework of the Linux Kernel can lead to arbitrary code execution or denial-of-service. It is crucial to update the Linux Kernel to version 5.17.13 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can range from arbitrary code execution with kernel privileges to a denial-of-service condition.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and it will analyze the dependencies for any known vulnerabilities.
Yes, a patch is available in Linux Kernel version 5.17.13. It is recommended to update to this version or later to fix the vulnerability.
The exact attack vector and exploitability of this vulnerability have not been proven yet. However, if successfully exploited, it could potentially be exploited remotely.
There are no known instances of this vulnerability being exploited in the wild at the moment.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.