In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zeroes, this results in a NULL pointer dereference.
References
| Link | Resource |
|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=2173973 | Issue Tracking Patch Third Party Advisory |
| https://github.com/torvalds/linux/commit/580077855a40741cf511766129702d97ff02f4d9 | Patch |
Configurations
History
06 Mar 2023, 14:41
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2173973 - Issue Tracking, Patch, Third Party Advisory | |
| References | (MISC) https://github.com/torvalds/linux/commit/580077855a40741cf511766129702d97ff02f4d9 - Patch | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CPE | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* |
|
| CWE | CWE-476 |
01 Mar 2023, 13:45
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-02-28 23:15
Updated : 2024-02-04 23:14
NVD link : CVE-2023-1095
Mitre link : CVE-2023-1095
CVE.ORG link : CVE-2023-1095
JSON object : View
Products Affected
redhat
- enterprise_linux
linux
- linux_kernel
CWE
CWE-476
NULL Pointer Dereference