Memory Leak Vulnerability in netfilter nf_tables
Summary
GSD-2022-1000888: netfilter: nf_tables: fix memory leak during stateful obj update. Affects Kernel versions >= d62d0ba97b5803183e70cfded7f7b9da76893bf5, < 53026346a94c43f35c32b18804041bc483271d87. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The netfilter nf_tables is a component of the Linux Kernel that provides a framework for packet filtering and network address translation. It allows users to define firewall rules and perform various network-related operations. The vulnerability identified in nf_tables is related to a memory leak during stateful object updates.
Vulnerability Detail
The memory leak vulnerability in nf_tables occurs when updating stateful objects. This can lead to a gradual depletion of system memory resources, potentially causing performance degradation or even denial of service conditions. The vulnerability was introduced in Linux Kernel version 5.4 by commit d62d0ba97b5803183e70cfded7f7b9da76893bf5 and is fixed in version 5.4.182 by commit 53026346a94c43f35c32b18804041bc483271d87.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version 5.4.182 or later. This can be done by pulling the latest updates from the official Linux Kernel repository using the following command:
git clone https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the fix by updating the Linux Kernel to the recommended version.
Conclusion
The memory leak vulnerability in netfilter nf_tables can be mitigated by updating the Linux Kernel to version 5.4.182 or later. It is crucial to promptly apply the fix to prevent potential performance issues or denial of service conditions. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
nf_tables is a component of the Linux Kernel that provides a framework for packet filtering and network address translation.
The vulnerability can result in a memory leak, leading to performance degradation or denial of service conditions.
To fix this vulnerability, update the Linux Kernel to version 5.4.182 or later.
No, there is no known workaround for this vulnerability.
For more details, refer to the vulnerability report at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1000xxx/GSD-2022-1000888.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.