netfilter: nf_tables: Avoid skb access on nf_stolen
Summary
GSD-2022-1004165: netfilter: nf_tables: avoid skb access on nf_stolen. Affects Kernel versions < 0016d5d46d7440729a3132f61a8da3bf7f84e2ba. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The netfilter package is a component of the Linux Kernel that provides firewalling and packet filtering functionality. It includes various modules, such as nf_tables, which is responsible for managing network packet filtering rules. The nf_tables module allows users to define rules for filtering and manipulating network packets at various stages of the networking stack. However, a vulnerability has been identified in nf_tables that could potentially lead to security issues.
Vulnerability Detail
The vulnerability in nf_tables involves accessing the skb (socket buffer) on nf_stolen. This can result in security risks, although the exact impact and likelihood of an attack are yet to be proven. The vulnerability has been assigned the ID GSD-2022-1004165 and is fixed in Linux Kernel version v5.18.13 by commit 0016d5d46d7440729a3132f61a8da3bf7f84e2ba. For more details, please refer to the references link provided.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The nf_tables vulnerability involving skb access on nf_stolen has been identified in the Linux Kernel. It is crucial to update the Kernel to version v5.18.13 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
nf_tables is a module in the netfilter package of the Linux Kernel that provides network packet filtering and manipulation capabilities.
The exact impact of this vulnerability is yet to be proven. However, it has the potential to result in security risks.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will alert you in real-time if the vulnerability is detected.
No specific workaround has been mentioned for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
You can find more information about this vulnerability in the provided references link.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
