netfilter: nf_tables: unlink table before deleting it
Summary
GSD-2021-1001724: netfilter: nf_tables: unlink table before deleting it. Affects Kernel versions >= 6001a930ce0378b62210d4f83583fc88a903d89d, < f65c73d3aabb87d4353e0bc4a718b5ae8c43fd04. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The vulnerability affects the Kernel package in the Linux ecosystem. The Kernel is the core component of the operating system that manages system resources and provides an interface for software to interact with the hardware. The nf_tables module in the Kernel is responsible for packet filtering and network address translation. This vulnerability specifically impacts the deletion of tables in nf_tables.
Vulnerability Detail
The vulnerability in nf_tables allows an attacker to delete a table without properly unlinking it, leading to a use-after-free condition. This can potentially be exploited to execute arbitrary code or cause a denial-of-service by crashing the system. The vulnerability was introduced in Linux Kernel version v5.12 and is fixed in version v5.14.10.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability.
Conclusion
The vulnerability in nf_tables can be mitigated by updating the Linux Kernel to version v5.14.10 or later. It is important to promptly apply the fix to ensure the security and stability of the system. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can potentially allow an attacker to execute arbitrary code or crash the system.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. It analyzes the manifest file like package-lock.json to identify vulnerabilities in the software.
Yes, the vulnerability is fixed in Linux Kernel version v5.14.10. It is recommended to update to this version or later.
Yes, this vulnerability can be exploited remotely if the affected system is exposed to the network.
There are no known instances of this vulnerability being exploited in the wild at the time of this report.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
