CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftpayload: sanitize offset and length before calling skbchecksum()
If access to offset + length is larger than the skbuff length, then skbchecksum() triggers BUGON().
skbchecksum() internally subtracts the length parameter while iterating over skbuff, BUGON(len) at the end of it checks that the expected length to be included in the checksum calculation is fully consumed.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50251?
CVE-2024-50251 is categorized as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-50251?
To fix CVE-2024-50251, update the Linux kernel to a version that is not affected by the vulnerability.
What versions of the Linux kernel are affected by CVE-2024-50251?
CVE-2024-50251 affects various Linux kernel versions including 4.5 through 4.19.323, and several versions up to and including 6.12-rc5.
What does CVE-2024-50251 vulnerability impact?
CVE-2024-50251 impacts the netfilter subsystem's handling of offsets and lengths in the Linux kernel, potentially leading to security issues.
Can CVE-2024-50251 be exploited remotely?
Yes, CVE-2024-50251 could potentially be exploited if an attacker can manipulate the packets being processed through netfilter in the affected Linux kernel versions.