CVE-2024-44983: netfilter: flowtable: validate vlan header
In the Linux kernel, the following vulnerability has been resolved:
netfilter: flowtable: validate vlan header
Ensure there is sufficient room to access the protocol field of the VLAN header, validate it once before the flowtable lookup.
===================================================== BUG: KMSAN: uninit-value in nfflowoffloadinethook+0x45a/0x5f0 net/netfilter/nfflowtableinet.c:32 nfflowoffloadinethook+0x45a/0x5f0 net/netfilter/nfflowtableinet.c:32 nfhookentryhookfn include/linux/netfilter.h:154 [inline] nfhookslow+0xf4/0x400 net/netfilter/core.c:626 nfhookingress include/linux/netfilternetdev.h:34 [inline] nfingress net/core/dev.c:5440 [inline]
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-44983?
CVE-2024-44983 has a moderate severity level due to its potential impact on network packet handling.
How do I fix CVE-2024-44983?
To address CVE-2024-44983, upgrade to the latest patched versions of the Linux kernel as specified in the remediation list.
What versions of the Linux kernel are affected by CVE-2024-44983?
CVE-2024-44983 affects multiple versions of the Linux kernel, including versions prior to 5.15.166 and some between 5.13 and 6.10.7.
Is CVE-2024-44983 exploitable remotely?
Yes, CVE-2024-44983 could be exploited remotely, particularly in scenarios involving network packet processing.
What is the nature of CVE-2024-44983?
CVE-2024-44983 involves a vulnerability in netfilter related to improper validation of VLAN headers in the Linux kernel.