github - ghsa-hh8j-q6h7-p5m3

ghsa-hh8j-q6h7-p5m3

Vulnerability from github

Published

2024-05-17 12:31

Modified

2024-05-17 12:31

Details

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_flow_offload: reset dst in route object after setting up flow

dst is transferred to the flow object, route object does not own it anymore. Reset dst in route object, otherwise if flow_offload_add() fails, error path releases dst twice, leading to a refcount underflow.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-27403"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-05-17T12:15:10Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_flow_offload: reset dst in route object after setting up flow\n\ndst is transferred to the flow object, route object does not own it\nanymore.  Reset dst in route object, otherwise if flow_offload_add()\nfails, error path releases dst twice, leading to a refcount underflow.",
  "id": "GHSA-hh8j-q6h7-p5m3",
  "modified": "2024-05-17T12:31:00Z",
  "published": "2024-05-17T12:31:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27403"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/012df10717da02367aaf92c65f9c89db206c15f4"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/4c167af9f6b5ae4a5dbc243d5983c295ccc2e43c"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/558b00a30e05753a62ecc7e05e939ca8f0241148"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/670548c8db44d76e40e1dfc06812bca36a61e9ae"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/9e0f0430389be7696396c62f037be4bf72cf93e3"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

cve-2024-27403

Vulnerability from cvelistv5

Published

2024-05-17 11:40

Modified

2024-12-19 08:54

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: reset dst in route object after setting up flow dst is transferred to the flow object, route object does not own it anymore. Reset dst in route object, otherwise if flow_offload_add() fails, error path releases dst twice, leading to a refcount underflow.

References

▼	URL	Tags
	https://git.kernel.org/stable/c/4c167af9f6b5ae4a5dbc243d5983c295ccc2e43c
	https://git.kernel.org/stable/c/012df10717da02367aaf92c65f9c89db206c15f4
	https://git.kernel.org/stable/c/558b00a30e05753a62ecc7e05e939ca8f0241148
	https://git.kernel.org/stable/c/670548c8db44d76e40e1dfc06812bca36a61e9ae
	https://git.kernel.org/stable/c/9e0f0430389be7696396c62f037be4bf72cf93e3

Impacted products

Vendor

Product

Version

▼

Linux

Version: a3c90f7a2323b331ae816d5b0633e68148e25d04
Version: a3c90f7a2323b331ae816d5b0633e68148e25d04
Version: a3c90f7a2323b331ae816d5b0633e68148e25d04
Version: a3c90f7a2323b331ae816d5b0633e68148e25d04
Version: a3c90f7a2323b331ae816d5b0633e68148e25d04

Linux

Version: 4.16

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-27403",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-17T17:17:07.998820Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:46:43.380Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T00:34:52.105Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/4c167af9f6b5ae4a5dbc243d5983c295ccc2e43c"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/012df10717da02367aaf92c65f9c89db206c15f4"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/558b00a30e05753a62ecc7e05e939ca8f0241148"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/670548c8db44d76e40e1dfc06812bca36a61e9ae"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/9e0f0430389be7696396c62f037be4bf72cf93e3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "include/net/netfilter/nf_flow_table.h",
            "net/netfilter/nf_flow_table_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4c167af9f6b5ae4a5dbc243d5983c295ccc2e43c",
              "status": "affected",
              "version": "a3c90f7a2323b331ae816d5b0633e68148e25d04",
              "versionType": "git"
            },
            {
              "lessThan": "012df10717da02367aaf92c65f9c89db206c15f4",
              "status": "affected",
              "version": "a3c90f7a2323b331ae816d5b0633e68148e25d04",
              "versionType": "git"
            },
            {
              "lessThan": "558b00a30e05753a62ecc7e05e939ca8f0241148",
              "status": "affected",
              "version": "a3c90f7a2323b331ae816d5b0633e68148e25d04",
              "versionType": "git"
            },
            {
              "lessThan": "670548c8db44d76e40e1dfc06812bca36a61e9ae",
              "status": "affected",
              "version": "a3c90f7a2323b331ae816d5b0633e68148e25d04",
              "versionType": "git"
            },
            {
              "lessThan": "9e0f0430389be7696396c62f037be4bf72cf93e3",
              "status": "affected",
              "version": "a3c90f7a2323b331ae816d5b0633e68148e25d04",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "include/net/netfilter/nf_flow_table.h",
            "net/netfilter/nf_flow_table_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.16"
            },
            {
              "lessThan": "4.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.150",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.80",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.19",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.7.*",
              "status": "unaffected",
              "version": "6.7.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.8",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_flow_offload: reset dst in route object after setting up flow\n\ndst is transferred to the flow object, route object does not own it\nanymore.  Reset dst in route object, otherwise if flow_offload_add()\nfails, error path releases dst twice, leading to a refcount underflow."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-19T08:54:21.794Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/4c167af9f6b5ae4a5dbc243d5983c295ccc2e43c"
        },
        {
          "url": "https://git.kernel.org/stable/c/012df10717da02367aaf92c65f9c89db206c15f4"
        },
        {
          "url": "https://git.kernel.org/stable/c/558b00a30e05753a62ecc7e05e939ca8f0241148"
        },
        {
          "url": "https://git.kernel.org/stable/c/670548c8db44d76e40e1dfc06812bca36a61e9ae"
        },
        {
          "url": "https://git.kernel.org/stable/c/9e0f0430389be7696396c62f037be4bf72cf93e3"
        }
      ],
      "title": "netfilter: nft_flow_offload: reset dst in route object after setting up flow",
      "x_generator": {
        "engine": "bippy-5f407fcff5a0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-27403",
    "datePublished": "2024-05-17T11:40:17.992Z",
    "dateReserved": "2024-02-25T13:47:42.681Z",
    "dateUpdated": "2024-12-19T08:54:21.794Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted