Use-after-free vulnerability in netfilter
Summary
GSD-2022-1000875: netfilter: fix use-after-free in __nf_register_net_hook(). Affects Kernel versions >= 2420b79f8c18a75ee2417cace381f4604b9b4365, < 49c24579cec41e32f13d57b337fd28fb208d4a5b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The netfilter package is a component of the Linux Kernel that provides a framework for packet filtering and network address translation. It allows for the implementation of various network security features, such as firewalling and network traffic control. The vulnerability described here affects the __nf_register_net_hook() function within netfilter.
Vulnerability Detail
The vulnerability is a use-after-free issue in the __nf_register_net_hook() function. This function is responsible for registering a network hook within the netfilter framework. By exploiting this vulnerability, an attacker could potentially manipulate freed memory, leading to a variety of security issues, including remote code execution or denial of service attacks. The vulnerability was introduced in version v4.14 of the Linux Kernel and has been fixed in version v5.4.183.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The use-after-free vulnerability in the __nf_register_net_hook() function of the netfilter package can be mitigated by updating the Linux Kernel to version v5.4.183 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Netfilter is a component of the Linux Kernel that provides packet filtering and network address translation capabilities.
__nf_register_net_hook() is a function within netfilter that is responsible for registering a network hook.
A use-after-free vulnerability occurs when a program continues to use memory after it has been freed, potentially leading to security issues.
Exploiting this vulnerability could result in remote code execution or denial of service attacks.
To fix this vulnerability, update the Linux Kernel to version v5.4.183 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
