CVE-2024-39504

netfilter: nft_inner: validate mandatory meta and payload

published July 12, 2024

CVSS
—
EPSS
0%
Percentile
18.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_inner: validate mandatory meta and payload

Check for mandatory netlink attributes in payload and meta expression

when used embedded from the inner expression, otherwise NULL pointer

dereference is possible from userspace.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00272 · 18.5th percentile
Published
2024-07-12T12:20Z
EPSS history
Timeline
  • 12 JUL 12:20Z
    netfilter: nft_inner: validate mandatory meta and payload
    cvelistv5