CVE-2024-0607

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-0607
A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.

6.6 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 4.7

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://access.redhat.com/security/cve/CVE-2024-0607 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2258635 Issue Tracking Patch Third Party Advisory
https://github.com/torvalds/linux/commit/c301f0981fdd3fd1ffac6836b423c4d7a8e0eb63 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
History

26 Jan 2024, 19:00

Type Values Removed Values Added
CPE cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Redhat enterprise Linux
Linux linux Kernel
Fedoraproject
Redhat
Linux
Fedoraproject fedora
References () https://access.redhat.com/security/cve/CVE-2024-0607 - () https://access.redhat.com/security/cve/CVE-2024-0607 - Third Party Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=2258635 - () https://bugzilla.redhat.com/show_bug.cgi?id=2258635 - Issue Tracking, Patch, Third Party Advisory
References () https://github.com/torvalds/linux/commit/c301f0981fdd3fd1ffac6836b423c4d7a8e0eb63 - () https://github.com/torvalds/linux/commit/c301f0981fdd3fd1ffac6836b423c4d7a8e0eb63 - Patch
CWE NVD-CWE-Other

21 Jan 2024, 12:15

Type Values Removed Values Added
References
  • () https://github.com/torvalds/linux/commit/c301f0981fdd3fd1ffac6836b423c4d7a8e0eb63 -
CWE CWE-787 CWE-229

21 Jan 2024, 11:15

Type Values Removed Values Added
Summary
  • (es) Se encontró una falla en el subsistema Netfilter en el kernel de Linux. El problema está en la función nft_byteorder_eval(), donde el código itera a través de un bucle y escribe en la matriz `dst`. En cada iteración, se escriben 8 bytes, pero `dst` es una matriz de u32, por lo que cada elemento solo tiene espacio para 4 bytes. Eso significa que cada iteración sobrescribe parte del elemento anterior, lo que posiblemente lleve a una escritura fuera de los límites. Esta falla permite que un usuario local provoque una denegación de servicio o potencialmente aumente sus privilegios en el sistema.
Summary (en) A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element, possibly leading to an out-of-bounds write. This flaw allows a local user to cause a denial of service or potentially escalate their privileges on the system. (en) A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.
CVSS v2 : unknown
v3 : 7.8 		v2 : unknown
v3 : 6.6

18 Jan 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-01-18 16:15

Updated : 2024-01-26 19:00

NVD link : CVE-2024-0607

Mitre link : CVE-2024-0607

CVE.ORG link : CVE-2024-0607

JSON object : View

Products Affected

fedoraproject

  • fedora

linux

  • linux_kernel

redhat

  • enterprise_linux
CWE
NVD-CWE-Other CWE-229

Improper Handling of Values