netfilter: nf_tables: initialize registers in nft_do_chain()
Summary
GSD-2022-1002517: netfilter: nf_tables: initialize registers in nft_do_chain(). Affects Kernel versions >= 96518518cc417bb0a8c80b9fb736202e28acdf96, < 4d28522acd1c4415c85f6b33463713a268f68965. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is an open-source monolithic Unix-like computer operating system kernel. It provides the core functionality for the Linux operating system. The nf_tables module is a subsystem within the Linux Kernel's netfilter framework that provides a new packet classification framework. It allows users to define firewall rules and perform network traffic filtering. The vulnerability in nf_tables arises from uninitialized registers in the nft_do_chain() function.
Vulnerability Detail
The vulnerability in nf_tables occurs due to uninitialized registers in the nft_do_chain() function. This can lead to potential security vulnerabilities, although the actual impact and attack plausibility have not been proven. The vulnerability was introduced in Linux Kernel version v3.13 and is fixed in version v4.9.309 by commit 4d28522acd1c4415c85f6b33463713a268f68965. Attackers may exploit this vulnerability to bypass firewall rules or perform unauthorized network traffic filtering.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the nf_tables module or use alternative firewall solutions until the Linux Kernel is updated. To disable the nf_tables module, users can execute the following command:
modprobe -r nf_tables
Conclusion
The nf_tables vulnerability in the Linux Kernel can potentially allow attackers to bypass firewall rules or perform unauthorized network traffic filtering. It is recommended to update the Linux Kernel to version v4.9.309 or later to mitigate this vulnerability. Users can also disable the nf_tables module or use alternative firewall solutions as a temporary workaround. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet proven, but it could potentially allow attackers to bypass firewall rules or perform unauthorized network traffic filtering.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for open-source vulnerabilities, including this one.
Yes, as a temporary workaround, you can disable the nf_tables module or use alternative firewall solutions until the Linux Kernel is updated. Instructions for disabling the nf_tables module are provided in the 'workaround' section.
To update the Linux Kernel, you can pull the latest updates from the official Linux Kernel repository and rebuild the kernel. Alternatively, you can wait for your Linux distribution to release an updated kernel package that includes the fix.
You can find more information about this vulnerability in the vulnerability database maintained by the Cloud Security Alliance. The specific vulnerability ID is GSD-2022-1002517.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
