Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missing a call to the nf_expect_get_id() helper function to calculate the expectation ID, otherwise LSB of the expectation object address is leaked to userspace.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
7b115755fb9d3aff0ddcd18a5c4d83381362acce to < 66e7650dbbb8e236e781c670b167edc81e771450affected3c79107631db1f7fd32cf3f7368e4672004a3010 to < 64c0b8e64be8368617ef08dfc59a3160563a1435affected3c79107631db1f7fd32cf3f7368e4672004a3010 to < eb4ca1a97e08ff5b920664ba292e576257e2d184affected3c79107631db1f7fd32cf3f7368e4672004a3010 to < 5e2c24f7b0911b15c29aefce760bcf770542fb61affected3c79107631db1f7fd32cf3f7368e4672004a3010 to < 24f407042cf90b0872de667460230d8d50c06c39affected3c79107631db1f7fd32cf3f7368e4672004a3010 to < 27662b46f2adaa52c1665a82af4b21c42c4337fdaffected3c79107631db1f7fd32cf3f7368e4672004a3010 to < 74de442b8e12a207c07953ee068009a7701aff8faffected3c79107631db1f7fd32cf3f7368e4672004a3010 to < 782161895eb4ac45cf7cfa8db375bd4766cb8299affected3d8b3d0384f709126beef6b917b7e97c23f18e74affected36bbd861a402a8c5bd8f0365a5967d34cc492f09affected1922476beeeea46bebbe577215078736dd4231dcaffectedf862c13c3c926d3008b2c2bcc746ab813108dfbfaffectedb0a90cae081d7ee14eaa46524fb70f4e23ae8905affected4.19.44 to < 4.19.320affected3.16.72 to < 3.17affected4.4.191 to < 4.5affected4.9.190 to < 4.10affected4.14.120 to < 4.15affected5.0.17 to < 5.1affected
Linux Linux
Default version status: affected
5.1affected0 to < 5.1unaffected4.19.320 to ≤ 4.19.*unaffected5.4.282 to ≤ 5.4.*unaffected5.10.224 to ≤ 5.10.*unaffected5.15.165 to ≤ 5.15.*unaffected6.1.103 to ≤ 6.1.*unaffected6.6.44 to ≤ 6.6.*unaffected6.10.3 to ≤ 6.10.*unaffected6.11 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/66e7650dbbb8e236e781c670b167edc81e771450 ↗
- https://git.kernel.org/stable/c/64c0b8e64be8368617ef08dfc59a3160563a1435 ↗
- https://git.kernel.org/stable/c/eb4ca1a97e08ff5b920664ba292e576257e2d184 ↗
- https://git.kernel.org/stable/c/5e2c24f7b0911b15c29aefce760bcf770542fb61 ↗
- https://git.kernel.org/stable/c/24f407042cf90b0872de667460230d8d50c06c39 ↗
- https://git.kernel.org/stable/c/27662b46f2adaa52c1665a82af4b21c42c4337fd ↗
- https://git.kernel.org/stable/c/74de442b8e12a207c07953ee068009a7701aff8f ↗
- https://git.kernel.org/stable/c/782161895eb4ac45cf7cfa8db375bd4766cb8299 ↗
- https://www.zerodayinitiative.com/advisories/ZDI-24-1182/ ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-355557.html ↗