Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() nf_osf_find() incorrectly returns true on mismatch, this leads to copying uninitialized memory area in nft_osf which can be used to leak stale kernel stack data to userspace.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
22c7652cdaa8cd33ce78bacceb4e826a3f795873 to < 721ea8ac063d70c2078c4e762212705de6151764affected22c7652cdaa8cd33ce78bacceb4e826a3f795873 to < 5d75fef3e61e797fab5c3fbba88caa74ab92ad47affected22c7652cdaa8cd33ce78bacceb4e826a3f795873 to < 816eab147e5c6f6621922b8515ad9010ceb1735eaffected22c7652cdaa8cd33ce78bacceb4e826a3f795873 to < 633c81c0449663f57d4138326d036dc6cfad674eaffected22c7652cdaa8cd33ce78bacceb4e826a3f795873 to < 559c36c5a8d730c49ef805a72b213d3bba155cc8affected
Linux Linux
Default version status: affected
5.2affected0 to < 5.2unaffected5.4.215 to ≤ 5.4.*unaffected5.10.146 to ≤ 5.10.*unaffected5.15.71 to ≤ 5.15.*unaffected5.19.12 to ≤ 5.19.*unaffected6.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/721ea8ac063d70c2078c4e762212705de6151764 ↗
- https://git.kernel.org/stable/c/5d75fef3e61e797fab5c3fbba88caa74ab92ad47 ↗
- https://git.kernel.org/stable/c/816eab147e5c6f6621922b8515ad9010ceb1735e ↗
- https://git.kernel.org/stable/c/633c81c0449663f57d4138326d036dc6cfad674e ↗
- https://git.kernel.org/stable/c/559c36c5a8d730c49ef805a72b213d3bba155cc8 ↗