mbox series

[SRU,F/J/L,0/1] CVE-2023-42753

Message ID 20230927113253.15134-1-magali.lemes@canonical.com
Headers show
Series CVE-2023-42753 | expand

Message

Magali Lemes Sept. 27, 2023, 11:32 a.m. UTC 
[Impact]
An array indexing vulnerability was found in the netfilter subsystem of the
Linux kernel. A missing macro could lead to a miscalculation of the `h->nets`
array offset, providing attackers with the primitive to arbitrarily
increment/decrement a memory buffer out-of-bound. This issue may allow a local
user to crash the system or potentially escalate their privileges on the
system.

[Backport]
Clean cherry-pick.

[Test]
Compile and boot tested.

[Regression potential]
Netfilter's ipset would be affected.

Kyle Zeng (1):
  netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
    ip_set_hash_netportnet.c

 net/netfilter/ipset/ip_set_hash_netportnet.c | 1 +
 1 file changed, 1 insertion(+)

Comments

Tim Gardner Sept. 27, 2023, 12:34 p.m. UTC | #1 
On 9/27/23 5:32 AM, Magali Lemes wrote:
> [Impact]
> An array indexing vulnerability was found in the netfilter subsystem of the
> Linux kernel. A missing macro could lead to a miscalculation of the `h->nets`
> array offset, providing attackers with the primitive to arbitrarily
> increment/decrement a memory buffer out-of-bound. This issue may allow a local
> user to crash the system or potentially escalate their privileges on the
> system.
> 
> [Backport]
> Clean cherry-pick.
> 
> [Test]
> Compile and boot tested.
> 
> [Regression potential]
> Netfilter's ipset would be affected.
> 
> Kyle Zeng (1):
>    netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
>      ip_set_hash_netportnet.c
> 
>   net/netfilter/ipset/ip_set_hash_netportnet.c | 1 +
>   1 file changed, 1 insertion(+)
> 
Acked-by: Tim Gardner <tim.gardner@canonical.com>
Roxana Nicolescu Sept. 28, 2023, 7:42 a.m. UTC | #2 
On 27/09/2023 13:32, Magali Lemes wrote:
> [Impact]
> An array indexing vulnerability was found in the netfilter subsystem of the
> Linux kernel. A missing macro could lead to a miscalculation of the `h->nets`
> array offset, providing attackers with the primitive to arbitrarily
> increment/decrement a memory buffer out-of-bound. This issue may allow a local
> user to crash the system or potentially escalate their privileges on the
> system.
>
> [Backport]
> Clean cherry-pick.
>
> [Test]
> Compile and boot tested.
>
> [Regression potential]
> Netfilter's ipset would be affected.
>
> Kyle Zeng (1):
>    netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
>      ip_set_hash_netportnet.c
>
>   net/netfilter/ipset/ip_set_hash_netportnet.c | 1 +
>   1 file changed, 1 insertion(+)
>
Acked-by: Roxana Nicolescu <roxana.nicolescu@canonical.com>
Roxana Nicolescu Sept. 29, 2023, 7:42 a.m. UTC | #3 
On 27/09/2023 13:32, Magali Lemes wrote:
> [Impact]
> An array indexing vulnerability was found in the netfilter subsystem of the
> Linux kernel. A missing macro could lead to a miscalculation of the `h->nets`
> array offset, providing attackers with the primitive to arbitrarily
> increment/decrement a memory buffer out-of-bound. This issue may allow a local
> user to crash the system or potentially escalate their privileges on the
> system.
>
> [Backport]
> Clean cherry-pick.
>
> [Test]
> Compile and boot tested.
>
> [Regression potential]
> Netfilter's ipset would be affected.
>
> Kyle Zeng (1):
>    netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
>      ip_set_hash_netportnet.c
>
>   net/netfilter/ipset/ip_set_hash_netportnet.c | 1 +
>   1 file changed, 1 insertion(+)
>
Applied to focal,jammy,lunar:master-next. Thanks!

Roxana