CVE-2024-26673

netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations

published April 2, 2024

CVSS
—
EPSS
0%
Percentile
13.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations

- Disallow families other than NFPROTO_{IPV4,IPV6,INET}.

- Disallow layer 4 protocol with no ports, since destination port is a

mandatory attribute for this object.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.9th percentile
Published
2024-04-02T06:51Z
EPSS history
Timeline
  • 02 APR 06:51Z
    netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
    cvelistv5