Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit: reject configurations that cause integer overflow Reject bogus configs where internal token counter wraps around. This only occurs with very very large requests, such as 17gbyte/s. Its better to reject this rather than having incorrect ratelimit.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
d2168e849ebf617b2b7feae44c0c0baf739cb610 to < 79d4efd75e7dbecd855a3b8a63e65f7265f466e1affectedd2168e849ebf617b2b7feae44c0c0baf739cb610 to < bc6e242bb74e2ae616bfd2b250682b738e781c9baffectedd2168e849ebf617b2b7feae44c0c0baf739cb610 to < 9882495d02ecc490604f747437a40626dc9160d0affectedd2168e849ebf617b2b7feae44c0c0baf739cb610 to < 00c2c29aa36d1d1827c51a3720e9f893a22c7c6aaffectedd2168e849ebf617b2b7feae44c0c0baf739cb610 to < c9d9eb9c53d37cdebbad56b91e40baf42d5a97aaaffected
Linux Linux
Default version status: affected
4.3affected0 to < 4.3unaffected5.15.149 to ≤ 5.15.*unaffected6.1.76 to ≤ 6.1.*unaffected6.6.15 to ≤ 6.6.*unaffected6.7.3 to ≤ 6.7.*unaffected6.8 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/79d4efd75e7dbecd855a3b8a63e65f7265f466e1 ↗
- https://git.kernel.org/stable/c/bc6e242bb74e2ae616bfd2b250682b738e781c9b ↗
- https://git.kernel.org/stable/c/9882495d02ecc490604f747437a40626dc9160d0 ↗
- https://git.kernel.org/stable/c/00c2c29aa36d1d1827c51a3720e9f893a22c7c6a ↗
- https://git.kernel.org/stable/c/c9d9eb9c53d37cdebbad56b91e40baf42d5a97aa ↗