High · published September 26, 2023
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 4.4.165, < 4.5 | 4.5 |
| linux/linux_kernel | ≥ 4.9.141, < 4.10 | 4.10 |
| linux/linux_kernel | ≥ 4.14.84, < 4.15 | 4.15 |
| linux/linux_kernel | ≥ 4.19.5, < 4.19.295 | 4.19.295 |
| linux/linux_kernel | ≥ 4.20, < 5.4.257 | 5.4.257 |
| linux/linux_kernel | ≥ 5.5, < 5.10.195 | 5.10.195 |
| linux/linux_kernel | ≥ 5.11, < 5.15.132 | 5.15.132 |
| linux/linux_kernel | ≥ 5.16, < 6.1.53 | 6.1.53 |
| linux/linux_kernel | ≥ 6.2, < 6.4.16 | 6.4.16 |
| linux/linux_kernel | ≥ 6.5, < 6.5.3 | 6.5.3 |
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux | all versions | — |
| redhat/enterprise_linux | all versions | — |
| debian/debian_linux | all versions | — |