Orta CVSS 5.5
CVE-2024-35962: Linux Kernel: güvenlik açığı
Açıklama (NVD)
In the Linux kernel, the following vulnerability has been resolved: netfilter: complete validation of user input In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() calls. In all functions, we can perform the @optlen validation before even calling xt_alloc_table_info() with the following check: if ((u64)optlen < (u64)tmp.size + sizeof(tmp)) return -EINVAL;
Özet bilgiler
- Ürün
- Linux Linux Kernel
- CVSS v3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,24 (yüzdelik 15)
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| linux-linux-kernel | 5.15.154 | — | 5.15.156 |
| linux-linux-kernel | 6.1.85 | — | 6.1.87 |
| linux-linux-kernel | 6.6.26 | — | 6.6.28 |
| linux-linux-kernel | 6.8.5 | — | 6.8.7 |
| linux-linux-kernel | 5.10.215 | 5.10.215 | — |
| linux-linux-kernel | 6.9 | 6.9 | — |
| debian-debian-linux | 10.0 | 10.0 | — |