| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <2025022634-CVE-2022-49293-15b7@gregkh> Date: Wed, 26 Feb 2025 02:58:18 +0100 From: Greg Kroah-Hartman <gregkh@...uxfoundation.org> To: linux-cve-announce@...r.kernel.org Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org> Subject: CVE-2022-49293: netfilter: nf_tables: initialize registers in nft_do_chain() Description =========== In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: initialize registers in nft_do_chain() Initialize registers to avoid stack leak into userspace. The Linux kernel CVE team has assigned CVE-2022-49293 to this issue. Affected and fixed versions =========================== Issue introduced in 3.13 with commit 96518518cc417bb0a8c80b9fb736202e28acdf96 and fixed in 4.9.309 with commit 4d28522acd1c4415c85f6b33463713a268f68965 Issue introduced in 3.13 with commit 96518518cc417bb0a8c80b9fb736202e28acdf96 and fixed in 4.14.274 with commit a3cc32863b175168283cb0a5fde08de6a1e27df9 Issue introduced in 3.13 with commit 96518518cc417bb0a8c80b9fb736202e28acdf96 and fixed in 4.19.237 with commit 88791b79a1eb2ba94e95d039243e28433583a67b Issue introduced in 3.13 with commit 96518518cc417bb0a8c80b9fb736202e28acdf96 and fixed in 5.4.188 with commit 06f0ff82c70241a766a811ae1acf07d6e2734dcb Issue introduced in 3.13 with commit 96518518cc417bb0a8c80b9fb736202e28acdf96 and fixed in 5.10.109 with commit 2c74374c2e88c7b7992bf808d9f9391f7452f9d9 Issue introduced in 3.13 with commit 96518518cc417bb0a8c80b9fb736202e28acdf96 and fixed in 5.15.32 with commit fafb904156fbb8f1dd34970cd5223e00b47c33be Issue introduced in 3.13 with commit 96518518cc417bb0a8c80b9fb736202e28acdf96 and fixed in 5.16.18 with commit 64f24c76dd0ce53d0fa3a0bfb9aeea507c769485 Issue introduced in 3.13 with commit 96518518cc417bb0a8c80b9fb736202e28acdf96 and fixed in 5.17.1 with commit dd03640529204ef4b8189fbdea08217d8d98271f Issue introduced in 3.13 with commit 96518518cc417bb0a8c80b9fb736202e28acdf96 and fixed in 5.18 with commit 4c905f6740a365464e91467aa50916555b28213d Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2022-49293 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: net/netfilter/nf_tables_core.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/4d28522acd1c4415c85f6b33463713a268f68965 https://git.kernel.org/stable/c/a3cc32863b175168283cb0a5fde08de6a1e27df9 https://git.kernel.org/stable/c/88791b79a1eb2ba94e95d039243e28433583a67b https://git.kernel.org/stable/c/06f0ff82c70241a766a811ae1acf07d6e2734dcb https://git.kernel.org/stable/c/2c74374c2e88c7b7992bf808d9f9391f7452f9d9 https://git.kernel.org/stable/c/fafb904156fbb8f1dd34970cd5223e00b47c33be https://git.kernel.org/stable/c/64f24c76dd0ce53d0fa3a0bfb9aeea507c769485 https://git.kernel.org/stable/c/dd03640529204ef4b8189fbdea08217d8d98271f https://git.kernel.org/stable/c/4c905f6740a365464e91467aa50916555b28213d
Powered by blists - more mailing lists