netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value
Summary
GSD-2021-1002039: netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value. Affects Kernel versions >= 68983a354a655c35d3fb204489d383a2a051fda7, < 2a670c323055282c9b72794a491d53cef86bbeaf. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The netfilter package is a component of the Linux Kernel that provides network packet filtering capabilities. It allows administrators to define rules for accepting, dropping, or modifying network packets based on various criteria. The xt_IDLETIMER module is a part of netfilter and is responsible for tracking idle connections and applying specific actions when a connection remains idle for a certain period of time. However, a vulnerability has been discovered in the xt_IDLETIMER module that can lead to a panic when the timer_type parameter is set to a garbage value.
Vulnerability Detail
The vulnerability in the xt_IDLETIMER module occurs when the timer_type parameter is set to an unexpected value. This can trigger a panic in the Linux Kernel, resulting in a system crash. An attacker with the ability to manipulate the timer_type parameter could exploit this vulnerability to cause a denial-of-service (DoS) condition. The impact of this vulnerability is limited to systems running the affected versions of the Linux Kernel with the xt_IDLETIMER module enabled.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. Updating the Linux Kernel to the fixed version is the recommended solution.
Conclusion
The netfilter xt_IDLETIMER vulnerability can lead to a system crash when the timer_type parameter is set to a garbage value. It is recommended to update the Linux Kernel to version v5.10.76 or later to fix this vulnerability. Regularly updating the Linux Kernel is important to ensure the latest security patches are applied. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Netfilter is a component of the Linux Kernel that provides network packet filtering capabilities. The xt_IDLETIMER module is a part of netfilter and is responsible for tracking idle connections and applying specific actions when a connection remains idle for a certain period of time.
The vulnerability can lead to a system crash (panic) in the Linux Kernel when the timer_type parameter is set to a garbage value. An attacker could exploit this vulnerability to cause a denial-of-service (DoS) condition.
To fix the vulnerability, users should update their Linux Kernel to version v5.10.76 or later. Regularly updating the Linux Kernel is recommended to ensure the latest security patches are applied.
There is no known workaround for this vulnerability. Updating the Linux Kernel to the fixed version is the recommended solution.
For more information about this vulnerability, you can refer to the provided references link or contact info@devnack.com for further support.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
