Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-21826

netfilter: nf_tables: reject mismatching sum of field_len with set key length

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject mismatching sum of field_len with set key length The field length description provides the length of each separated key field in the concatenation, each field gets rounded up to 32-bits to calculate the pipapo rule width from pipapo_init(). The set key length provides the total size of the key aligned to 32-bits. Register-based arithmetics still allows for combining mismatching set key length and field length description, eg. set key length 10 and field description [ 5, 4 ] leading to pipapo width of 12.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2d4c0798a1ef8db15b3277697ac2def4eda42312 to < 6b467c8feac759f4c5c86d708beca2aa2b29584faffected
  • 77be8c495a3f841e88b46508cc20d3d7d3289da3 to < 5083a7ae45003456c253e981b30a43f71230b4a3affected
  • 9cb084df01e198119de477ac691d682fb01e80f3 to < 2ac254343d3cf228ae0738b2615fedf85d000752affected
  • dc45bb00e66a33de1abb29e3d587880e1d4d9a7e to < 82e491e085719068179ff6a5466b7387cc4bbf32affected
  • 3ce67e3793f48c1b9635beb9bb71116ca1e51b58 to < 49b7182b97bafbd5645414aff054b4a65d05823daffected
  • 3ce67e3793f48c1b9635beb9bb71116ca1e51b58 to < ab50d0eff4a939d20c37721fd9766347efcdb6f6affected
  • 3ce67e3793f48c1b9635beb9bb71116ca1e51b58 to < 1b9335a8000fb70742f7db10af314104b6ace220affected
  • ff67e3e488090908dc015ba04d7407d8bd467f7eaffected
  • 5.10.209 to < 5.10.235affected
  • 5.15.148 to < 5.15.179affected
  • 6.1.75 to < 6.1.129affected
  • 6.6.14 to < 6.6.76affected
  • 6.7.2 to < 6.8affected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 5.10.235 to ≤ 5.10.*unaffected
  • 5.15.179 to ≤ 5.15.*unaffected
  • 6.1.129 to ≤ 6.1.*unaffected
  • 6.6.76 to ≤ 6.6.*unaffected
  • 6.12.13 to ≤ 6.12.*unaffected
  • 6.13.2 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References