Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_nfacct: don't assume acct name is null-terminated BUG: KASAN: slab-out-of-bounds in .. lib/vsprintf.c:721 Read of size 1 at addr ffff88801eac95c8 by task syz-executor183/5851 [..] string+0x231/0x2b0 lib/vsprintf.c:721 vsnprintf+0x739/0xf00 lib/vsprintf.c:2874 [..] nfacct_mt_checkentry+0xd2/0xe0 net/netfilter/xt_nfacct.c:41 xt_check_match+0x3d1/0xab0 net/netfilter/x_tables.c:523 nfnl_acct_find_get() handles non-null input, but the error printk relied on its presence.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 to < 66d41268ede1e1b6e71ba28be923397ff0b2b9c3affectedceb98d03eac5704820f2ac1f370c9ff385e3a9f5 to < e021a1eee196887536a6630c5492c23a4c78d452affectedceb98d03eac5704820f2ac1f370c9ff385e3a9f5 to < b10cfa2de13d28ddd03210eb234422b7ec92725aaffectedceb98d03eac5704820f2ac1f370c9ff385e3a9f5 to < e18939176e657a3a20bfbed357b8c55a9f82aba3affectedceb98d03eac5704820f2ac1f370c9ff385e3a9f5 to < 58004aa21e79addaf41667bfe65e93ec51653f18affectedceb98d03eac5704820f2ac1f370c9ff385e3a9f5 to < 7c1ae471da69c09242834e956218ea6a42dd405aaffectedceb98d03eac5704820f2ac1f370c9ff385e3a9f5 to < 58007fc7b94fb2702000045ff401eb7f5bde7828affectedceb98d03eac5704820f2ac1f370c9ff385e3a9f5 to < df13c9c6ce1d55c31d1bd49db65a7fbbd86aab13affectedceb98d03eac5704820f2ac1f370c9ff385e3a9f5 to < bf58e667af7d96c8eb9411f926a0a0955f41ce21affected
Linux Linux
Default version status: affected
3.3affected0 to < 3.3unaffected5.4.297 to ≤ 5.4.*unaffected5.10.241 to ≤ 5.10.*unaffected5.15.190 to ≤ 5.15.*unaffected6.1.148 to ≤ 6.1.*unaffected6.6.102 to ≤ 6.6.*unaffected6.12.42 to ≤ 6.12.*unaffected6.15.10 to ≤ 6.15.*unaffected6.16.1 to ≤ 6.16.*unaffected6.17 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/66d41268ede1e1b6e71ba28be923397ff0b2b9c3 ↗
- https://git.kernel.org/stable/c/e021a1eee196887536a6630c5492c23a4c78d452 ↗
- https://git.kernel.org/stable/c/b10cfa2de13d28ddd03210eb234422b7ec92725a ↗
- https://git.kernel.org/stable/c/e18939176e657a3a20bfbed357b8c55a9f82aba3 ↗
- https://git.kernel.org/stable/c/58004aa21e79addaf41667bfe65e93ec51653f18 ↗
- https://git.kernel.org/stable/c/7c1ae471da69c09242834e956218ea6a42dd405a ↗
- https://git.kernel.org/stable/c/58007fc7b94fb2702000045ff401eb7f5bde7828 ↗
- https://git.kernel.org/stable/c/df13c9c6ce1d55c31d1bd49db65a7fbbd86aab13 ↗
- https://git.kernel.org/stable/c/bf58e667af7d96c8eb9411f926a0a0955f41ce21 ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html ↗