Tracker / CVE-2024-42269
CVE-2024-42269
Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). ip6table_nat_table_init() accesses net->gen->ptr[ip6table_nat_net_ops.id], but the function is exposed to user space before the entry is allocated via register_pernet_subsys(). Let's call register_pernet_subsys() before xt_register_template().
Affected products and versions
| linux | linux_kernel |
|---|---|
| linux | linux_kernel · 5.15 → 6.1.104 |
| linux | linux_kernel · 6.2 → 6.6.45 |
| linux | linux_kernel · 6.7 → 6.10.4 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.