netfilter: nf_tables: Fix dereference of null pointer flow
Summary
GSD-2021-1001183: netfilter: nf_tables: Fix dereference of null pointer flow. Affects Kernel versions >= 09b1f676e2e0bbff67c568672c565c6f31470157, < 70a5a1950cca02c5cd161bb3846b4d983eed97d3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality and interfaces for managing system resources and executing user programs. The netfilter subsystem within the Linux Kernel is responsible for packet filtering, network address translation, and other network-related operations. nf_tables is a component of netfilter that provides a new packet classification framework. This vulnerability affects the nf_tables component of the Linux Kernel.
Vulnerability Detail
The vulnerability identified as GSD-2021-1001183 in the nf_tables component of the Linux Kernel involves a null pointer dereference flaw. This flaw can be triggered when certain operations are performed on nf_tables, leading to a null pointer being dereferenced. An attacker could potentially exploit this vulnerability to cause a denial-of-service condition or execute arbitrary code with kernel privileges. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The nf_tables component of the Linux Kernel is vulnerable to a null pointer dereference flaw. This vulnerability can potentially lead to a denial-of-service condition or arbitrary code execution with kernel privileges. It is crucial to update the Linux Kernel to version v5.13.5 or later to mitigate this vulnerability. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability could potentially lead to a denial-of-service condition or allow an attacker to execute arbitrary code with kernel privileges.
You can use Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert Playground allows you to analyze your application's manifest file, such as package-lock.json, without requiring access to the code or installation.
No specific workaround has been provided for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
No, this vulnerability was introduced in version v5.13.2 and fixed in version v5.13.5. Versions prior to v5.13.2 are not affected.
You can find more information about this vulnerability in the GSD database entry: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1001xxx/GSD-2021-1001183.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
