netfilter: nf_tables: initialize registers in nft_do_chain()
Summary
GSD-2022-1002150: netfilter: nf_tables: initialize registers in nft_do_chain(). Affects Kernel versions >= 96518518cc417bb0a8c80b9fb736202e28acdf96, < 2c74374c2e88c7b7992bf808d9f9391f7452f9d9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The vulnerability affects the Kernel package in the Linux ecosystem. The Kernel package is responsible for managing the core functionality of the operating system. It provides essential services and interfaces for hardware, software, and user applications. The specific vulnerability is related to the nf_tables component within the netfilter framework. nf_tables is a subsystem of netfilter that provides a new packet classification framework for firewalling, NAT, and packet mangling. This vulnerability arises from the failure to properly initialize registers in the nft_do_chain() function.
Vulnerability Detail
The vulnerability in nf_tables allows an attacker to exploit uninitialized registers, potentially leading to information disclosure, privilege escalation, or denial of service. By manipulating the uninitialized registers, an attacker could execute arbitrary code or bypass security measures. The vulnerability was introduced in Linux Kernel version v3.13 and is fixed in version v5.10.109 by commit 2c74374c2e88c7b7992bf808d9f9391f7452f9d9.
How To Fix
No fixed version is published for this vulnerability.
To fix the vulnerability, it is recommended to update the Linux Kernel package to version v5.10.109 or later. This can be done by pulling the latest updates from the official Linux Kernel repository. Alternatively, users can apply the specific commit 2c74374c2e88c7b7992bf808d9f9391f7452f9d9 to their existing Kernel version.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the fix by updating the Kernel package.
Conclusion
The vulnerability in nf_tables within the Kernel package poses a potential risk of information disclosure, privilege escalation, or denial of service. It is crucial to update the Kernel package to version v5.10.109 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability could potentially allow an attacker to execute arbitrary code, gain elevated privileges, or cause a denial of service.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will provide real-time alerts for open-source vulnerabilities.
At the time of this report, there is no known public exploit for this vulnerability. However, it is crucial to apply the fix as soon as possible to mitigate any potential risks.
Yes, this vulnerability can be exploited remotely if the affected system is exposed to the internet and the necessary conditions for exploitation are met.
To exploit this vulnerability, an attacker would need to have the ability to send specially crafted packets to the targeted system.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.