Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH The XT_HASHLIMIT_RATE_MATCH flag mode changes the semantics of the dsthash_ent structure which represents an entry in the hashtable. There is a union area which uses a different layout to express the rate match mode. Update .checkentry path to validate the XT_HASHLIMIT_RATE_MATCH mode flag is requested by two or more different rules that refer to the same hashtable. Otherwise, uninitialized access to the burst field in the union is possible. Reject the use of the XT_HASHLIMIT_RATE_MATCH mode flag if set on by revision less than 3 too.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
bea74641e3786d51dcf1175527cc1781420961c9 to < 402befce5854c195058cf4bab7c78ca286068a26affectedbea74641e3786d51dcf1175527cc1781420961c9 to < dee686b5e7f21180538ff719867702f411c8eb5caffectedbea74641e3786d51dcf1175527cc1781420961c9 to < f76ab783e7d8d33e33dd7dfa697297f70d57b0e8affectedbea74641e3786d51dcf1175527cc1781420961c9 to < 24683fea1f06bd3bd2707b99460e859bc6464c22affectedbea74641e3786d51dcf1175527cc1781420961c9 to < 32ec8d4aba2cf22e12bdc28df8c4bd833c195fc0affectedbea74641e3786d51dcf1175527cc1781420961c9 to < d186f77d18bdfb252d401ff992ca3001a6a65a0faffectedbea74641e3786d51dcf1175527cc1781420961c9 to < 06a76334243ccd875a981aa8bb46c0f931ef1e3baffectedbea74641e3786d51dcf1175527cc1781420961c9 to < 305b63e1402267459fdabb183af4527f6799eebfaffected
Linux Linux
Default version status: affected
4.14affected0 to < 4.14unaffected5.10.265 to ≤ 5.10.*unaffected5.15.216 to ≤ 5.15.*unaffected6.1.183 to ≤ 6.1.*unaffected6.6.151 to ≤ 6.6.*unaffected6.12.103 to ≤ 6.12.*unaffected6.18.44 to ≤ 6.18.*unaffected7.1.8 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/402befce5854c195058cf4bab7c78ca286068a26 ↗
- https://git.kernel.org/stable/c/dee686b5e7f21180538ff719867702f411c8eb5c ↗
- https://git.kernel.org/stable/c/f76ab783e7d8d33e33dd7dfa697297f70d57b0e8 ↗
- https://git.kernel.org/stable/c/24683fea1f06bd3bd2707b99460e859bc6464c22 ↗
- https://git.kernel.org/stable/c/32ec8d4aba2cf22e12bdc28df8c4bd833c195fc0 ↗
- https://git.kernel.org/stable/c/d186f77d18bdfb252d401ff992ca3001a6a65a0f ↗
- https://git.kernel.org/stable/c/06a76334243ccd875a981aa8bb46c0f931ef1e3b ↗
- https://git.kernel.org/stable/c/305b63e1402267459fdabb183af4527f6799eebf ↗