CVE-2024-42269

netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().

published August 17, 2024

CVSS
—
EPSS
0%
Percentile
12.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().

ip6table_nat_table_init() accesses net->gen->ptr[ip6table_nat_net_ops.id],

but the function is exposed to user space before the entry is allocated

via register_pernet_subsys().

Let's call register_pernet_subsys() before xt_register_template().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00226 · 12.6th percentile
Published
2024-08-17T08:54Z
EPSS history
Timeline
  • 17 AUG 08:54Z
    netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().
    cvelistv5