Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tproxy: restrict to prerouting hook TPROXY is only allowed from prerouting, but nft_tproxy doesn't check this. This fixes a crash (null dereference) when using tproxy from e.g. output.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
4ed8eb6570a49931c705512060acd50058d61616 to < 0b21edf4cc13516716848e0a4fdf726aa2a62cd9affected4ed8eb6570a49931c705512060acd50058d61616 to < 83ef55c4281f1b4c6bd4457c2e96ccd1c9e80200affected4ed8eb6570a49931c705512060acd50058d61616 to < eaba3f9b672c3a3f820da8ee9584b9520674eafaaffected4ed8eb6570a49931c705512060acd50058d61616 to < 9a1d92cbeac3335fee99fa865b8c5b0f2e71a8f7affected4ed8eb6570a49931c705512060acd50058d61616 to < 343fed6b0daeb528ae5c9d4d84d9ff763ac95619affected4ed8eb6570a49931c705512060acd50058d61616 to < 18bbc3213383a82b05383827f4b1b882e3f0a5a5affected
Linux Linux
Default version status: affected
4.19affected0 to < 4.19unaffected4.19.273 to ≤ 4.19.*unaffected5.4.232 to ≤ 5.4.*unaffected5.10.169 to ≤ 5.10.*unaffected5.15.95 to ≤ 5.15.*unaffected5.19.6 to ≤ 5.19.*unaffected6.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/0b21edf4cc13516716848e0a4fdf726aa2a62cd9 ↗
- https://git.kernel.org/stable/c/83ef55c4281f1b4c6bd4457c2e96ccd1c9e80200 ↗
- https://git.kernel.org/stable/c/eaba3f9b672c3a3f820da8ee9584b9520674eafa ↗
- https://git.kernel.org/stable/c/9a1d92cbeac3335fee99fa865b8c5b0f2e71a8f7 ↗
- https://git.kernel.org/stable/c/343fed6b0daeb528ae5c9d4d84d9ff763ac95619 ↗
- https://git.kernel.org/stable/c/18bbc3213383a82b05383827f4b1b882e3f0a5a5 ↗