In the Linux kernel, the following vulnerability has been resolved: netfilter: tproxy: bail out if IP has been disabled on the device syzbot reports: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [..] RIP: 0010:nf_tproxy_laddr4+0xb7/0x340 net/ipv4/netfilter/nf_tproxy_ipv4.c:62 Call Trace: nft_tproxy_eval_v4 net/netfilter/nft_tproxy.c:56 [inline] nft_tproxy_eval+0xa9a/0x1a00 net/netfilter/nft_tproxy.c:168 __in_dev_get_rcu() can return NULL, so check for this.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel
Redhat
  • Enterprise Linux

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-553.16.1.rt7.357.el8_10 cpe:/a:redhat:enterprise_linux:8::nfv RHSA-2024:5102 2024-08-08T00:00:00Z
kernel-0:4.18.0-553.16.1.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2024:5101 2024-08-08T00:00:00Z
Red Hat Enterprise Linux 9
kernel-0:5.14.0-427.26.1.el9_4 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:4583 2024-07-17T00:00:00Z
kernel-0:5.14.0-427.26.1.el9_4 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:4583 2024-07-17T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/07eeedafc59c45fe5de43958128542be3784764c cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/10f0af5234dafd03d2b75233428ec3f11cf7e43d cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/21a673bddc8fd4873c370caf9ae70ffc6d47e8d3 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/570b4c52096e62fda562448f5760fd0ff06110f0 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/6fe5af4ff06db3d4d80e07a19356640428159f03 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/819bfeca16eb9ad647ddcae25e7e12c30612147c cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/caf3a8afb5ea00db6d5398adf148d5534615fd80 cve-icon cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024062135-CVE-2024-36270-f7f7@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-36270 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-36270 cve-icon
History

Wed, 11 Sep 2024 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 09 Sep 2024 13:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Thu, 08 Aug 2024 23:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:8::nfv
cpe:/o:redhat:enterprise_linux:8
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-06-21T10:18:07.026Z

Updated: 2024-09-11T17:34:46.135Z

Reserved: 2024-06-21T10:13:16.302Z

Link: CVE-2024-36270

cve-icon Vulnrichment

Updated: 2024-08-02T03:37:04.470Z

cve-icon NVD

Status : Analyzed

Published: 2024-06-21T11:15:10.117

Modified: 2024-09-09T13:16:22.050

Link: CVE-2024-36270

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-06-21T00:00:00Z

Links: CVE-2024-36270 - Bugzilla