CVE-2024-42070

MEDIUM

Linux Kernel < 3.13 - Use-After-Free in nf_tables Register Store Validation

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers register store validation for NFT_DATA_VALUE is conditional, however, the datatype is always either NFT_DATA_VALUE or NFT_DATA_VERDICT. This only requires a new helper function to infer the register type from the set datatype so this conditional check can be removed. Otherwise, pointer to chain object can be leaked through the registers.

References (12)

Core 12
Core References

Scores

CVSS v3 5.5
EPSS 0.0028
EPSS Percentile 20.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-401
Status published
Products (19)
Linux/Linux < 3.13
Linux/Linux 3.13
Linux/Linux 4.19.317 - 4.19.*
Linux/Linux 5.10.221 - 5.10.*
Linux/Linux 5.15.162 - 5.15.*
Linux/Linux 5.4.279 - 5.4.*
Linux/Linux 6.1.97 - 6.1.*
Linux/Linux 6.10
Linux/Linux 6.6.37 - 6.6.*
Linux/Linux 6.9.8 - 6.9.*
... and 9 more
Published Jul 29, 2024
Tracked Since Feb 18, 2026