Ubuntu
linux package

nft allows references to objects on different tables

Bug #1983154 reported by Thadeu Lima de Souza Cascardo
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
New
Undecided
Unassigned

Bug Description

[Impact]
When adding objects/sets/elements on the same nftables netlink batch, there can be cross-table references. When a table is deleted, references to freed objects may be left, leading to use-after-free vulnerabilities.

CVE References

Thadeu Lima de Souza Cascardo (cascardo)
information type: Public → Private Security
Revision history for this message
Seth Arnold (seth-arnold) wrote :

Please use CVE-2022-2586 for this issue.

Seth Arnold (seth-arnold)
information type: Private Security → Public Security
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.