Memory Leak Vulnerability in netfilter nf_tables
Summary
GSD-2022-1000740: netfilter: nf_tables: fix memory leak during stateful obj update. Affects Kernel versions >= d62d0ba97b5803183e70cfded7f7b9da76893bf5, < 34bb90e407e3288f610558beaae54ecaa32b11c4. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The netfilter nf_tables is a component of the Linux Kernel that provides a framework for packet filtering and network address translation. It allows users to define firewall rules and perform various network-related operations. The vulnerability in nf_tables could lead to a memory leak during stateful object updates.
Vulnerability Detail
The vulnerability in nf_tables arises from a memory leak issue that occurs during stateful object updates. When updating stateful objects, the nf_tables component fails to release allocated memory, resulting in a continuous accumulation of memory over time. This can lead to resource exhaustion and potential denial-of-service (DoS) attacks. The vulnerability was introduced in Linux Kernel version v5.4 and is fixed in version v5.16.12.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the provided fix by updating the Linux Kernel to the recommended version.
Conclusion
The memory leak vulnerability in netfilter nf_tables can be addressed by updating the Linux Kernel to version v5.16.12 or later. It is crucial to apply this fix to prevent potential resource exhaustion and denial-of-service attacks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
nf_tables is a component of the Linux Kernel that provides a framework for packet filtering and network address translation.
The vulnerability can lead to a memory leak, resulting in resource exhaustion and potential denial-of-service (DoS) attacks.
To fix the vulnerability, update the Linux Kernel to version v5.16.12 or later.
No, there is no known workaround for this vulnerability. Updating the Linux Kernel is necessary.
The updated Linux Kernel can be obtained from the official Linux Kernel repository.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
