Use-after-free vulnerability in netfilter
Summary
GSD-2022-1000900: netfilter: fix use-after-free in __nf_register_net_hook(). Affects Kernel versions >= 2420b79f8c18a75ee2417cace381f4604b9b4365, < bdd8fc1b826e6f23963f5bef3f7431c6188ec954. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The netfilter package is a component of the Linux Kernel that provides a framework for packet filtering and network address translation. It allows administrators to define rules for processing network packets and perform actions such as dropping or modifying them. The vulnerability described here is a use-after-free issue in the __nf_register_net_hook() function.
Vulnerability Detail
The use-after-free vulnerability in __nf_register_net_hook() can be exploited by an attacker to execute arbitrary code or cause a denial-of-service condition. This vulnerability occurs when a network hook is unregistered while still in use, leading to a use-after-free scenario where a dangling pointer can be accessed. An attacker who can trigger this vulnerability may be able to gain elevated privileges or crash the system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the official fix by updating the Linux Kernel.
Conclusion
The use-after-free vulnerability in netfilter's __nf_register_net_hook() function can lead to arbitrary code execution or denial-of-service attacks. It is crucial to update the Linux Kernel to version v4.19.233 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Netfilter is a component of the Linux Kernel that provides packet filtering and network address translation capabilities.
A use-after-free vulnerability occurs when a program continues to use a memory area after it has been freed, leading to potential security issues.
An attacker who can trigger the use-after-free vulnerability in __nf_register_net_hook() may be able to execute arbitrary code or cause a denial-of-service condition.
No, there is no known workaround. It is recommended to update the Linux Kernel to the latest version to apply the fix.
You can find more information about this vulnerability in the GSD-2022-1000900.json file available in the GSD database.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
