NetSight
IP …
high7.8

CVE-2023-6040

An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); …

Impact

An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function enables an attacker to achieve out-of-bounds access.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.16 before 4.19.305
from 4.20 before 5.4.267
from 5.5 before 5.10.208
from 5.11 before 5.15.147
from 5.16 before 5.18
DebianDebian Linux
Version 10.0

Weakness classification

CWE-125

References