https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 19:45:52 +0000 https://vulnerability.circl.lu/vuln/cve-2024-35962 <p><strong>Affected:</strong> Linux, Siemens RUGGEDCOM RST2428P, Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family, Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: complete validation of user input</p> <p>In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() calls.</p> <p>In all functions, we can perform the @optlen validation before even calling xt_alloc_table_info() with the following check:</p> <p>if ((u64)optlen &lt; (u64)tmp.size + sizeof(tmp)) return -EINVAL;</p> <p><strong>Affected:</strong> Linux, Siemens RUGGEDCOM RST2428P, Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family, Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: complete validation of user input</p> <p>In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() calls.</p> <p>In all functions, we can perform the @optlen validation before even calling xt_alloc_table_info() with the following check:</p> <p>if ((u64)optlen &lt; (u64)tmp.size + sizeof(tmp)) return -EINVAL;</p> https://vulnerability.circl.lu/vuln/cve-2024-35962