In the Linux kernel, the following vulnerability has been resolved:
netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
nf_osf_find() incorrectly returns true on mismatch, this leads to
copying uninitialized memory area in nft_osf which can be used to leak
stale kernel stack data to userspace.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Linux
Published: 2024-04-28T13:00:56.564Z
Updated: 2024-08-03T15:17:55.613Z
Reserved: 2024-02-25T13:44:28.317Z
Link: CVE-2022-48654
Vulnrichment
Updated: 2024-07-16T20:36:03.763Z
NVD
Status : Analyzed
Published: 2024-04-28T13:15:07.580
Modified: 2024-05-23T19:01:47.760
Link: CVE-2022-48654
Redhat