CVE-2024-42269: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().
In the Linux kernel, the following vulnerability has been resolved:
netfilter: iptables: Fix potential null-ptr-deref in ip6tablenattableinit().
ip6tablenattableinit() accesses net->gen->ptr[ip6tablenatnetops.id], but the function is exposed to user space before the entry is allocated via registerpernetsubsys().
Let's call registerpernetsubsys() before xtregistertemplate().
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42269?
CVE-2024-42269 has been classified with a medium severity level.
How do I fix CVE-2024-42269?
To fix CVE-2024-42269, update your Linux kernel to the latest available version that includes the patch.
Which Linux kernel versions are affected by CVE-2024-42269?
CVE-2024-42269 affects Linux kernel versions from 5.15 up to 6.1.104, 6.2 up to 6.6.45, and 6.7 up to 6.10.4.
What kind of vulnerability is represented by CVE-2024-42269?
CVE-2024-42269 is a potential null pointer dereference vulnerability in the netfilter iptables component of the Linux kernel.
Is my system vulnerable to CVE-2024-42269 if I use an outdated kernel?
Yes, systems running outdated Linux kernel versions that fall within the affected range are vulnerable to CVE-2024-42269.