CVE-2024-35962: netfilter: complete validation of user input
In the Linux kernel, the following vulnerability has been resolved:
netfilter: complete validation of user input
In my recent commit, I missed that doreplace() handlers use copyfromsockptr() (which I fixed), followed by unsafe copyfromsockptroffset() calls.
In all functions, we can perform the @optlen validation before even calling xtalloctableinfo() with the following check:
if ((u64)optlen < (u64)tmp.size + sizeof(tmp)) return -EINVAL;
Other sources
In the Linux kernel, the following vulnerability has been resolved:
netfilter: complete validation of user input
The Linux kernel CVE team has assigned CVE-2024-35962 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024052020-CVE-2024-35962-e5ce@gregkh/T
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.10.216 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.15.156 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.1.87 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.6.28 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.8.7
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35962?
CVE-2024-35962 has been classified as a critical severity vulnerability.
How do I fix CVE-2024-35962?
To fix CVE-2024-35962, update your Linux kernel to the latest versions listed in the advisory, specifically 5.10.216, 5.15.156, 6.1.87, 6.6.28, or 6.8.7.
What components are affected by CVE-2024-35962?
CVE-2024-35962 affects the netfilter component of the Linux kernel.
What are the risks of not fixing CVE-2024-35962?
Not fixing CVE-2024-35962 may lead to potential privilege escalation and system compromise.
Is CVE-2024-35962 exploitable remotely?
CVE-2024-35962 can potentially be exploited remotely if conditions allow unauthorized access to the affected kernel.