Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix leaked ct in error paths There are some situations where ct might be leaked as error paths are skipping the refcounted check and return immediately. In order to solve it make sure that the check is always called.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
6e86f0eca857ee42787e30e9ec0b726aebfcae0a to < 08fa37f4c8c59c294e9c18fea2d083ee94074e5aaffectedb160895d6bc9690459b16ef87799c9bd456af3ec to < e1ac8dce3a893641bef224ad057932f142b8a36faffected8d5a2c94c24dcc226863a7c2b5034750370c2189 to < f381a33f34dda9e4023e38ba68c943bca83245e9affectedda9f247fb5efcd5a2730cdc989291b383c439e10 to < 325eb61bb30790ea27782203a17b007ce1754a67affected3558faee8aace3541189c3a2ca45c7e85e144b44 to < 0b88be7211d21a0d68bb1e56dc805944e3654d6faffectedf6904ed15ed1a188543057e3cb0d02daa80edfc9 to < 4bd2b89f4028f250dd1c1625eb3da1979b04a5e8affectedbe102eb6a0e7c03db00e50540622f4e43b2d2844 to < 2e2a720766886190a6d35c116794693aabd332b6affected8c2da7330214ce30f8333d1799a27ed0a9418f07affected6.17.13 to < 6.18affected
Linux Linux
Default version status: unaffected
6.12.63 to < 6.12.64affected6.18.2 to < 6.18.3affected
References
- https://git.kernel.org/stable/c/08fa37f4c8c59c294e9c18fea2d083ee94074e5a ↗
- https://git.kernel.org/stable/c/e1ac8dce3a893641bef224ad057932f142b8a36f ↗
- https://git.kernel.org/stable/c/f381a33f34dda9e4023e38ba68c943bca83245e9 ↗
- https://git.kernel.org/stable/c/325eb61bb30790ea27782203a17b007ce1754a67 ↗
- https://git.kernel.org/stable/c/0b88be7211d21a0d68bb1e56dc805944e3654d6f ↗
- https://git.kernel.org/stable/c/4bd2b89f4028f250dd1c1625eb3da1979b04a5e8 ↗
- https://git.kernel.org/stable/c/2e2a720766886190a6d35c116794693aabd332b6 ↗