netfilter: nf_conntrack_expect: skip expectations in other netns via proc
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.1.168, 6.6.131, 6.12.80, 6.18.21, 6.19.11
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: skip expectations in other netns via proc Skip expectations that do not reside in this netns. Similar to e77e6ff502ea ("netfilter: conntrack: do not dump other netns's conntrack entries via proc").
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 9b03f38d0487f3908696242286d934c9b38f9d2a · fixed in 2028405ea6987b4448784e439413202cfe19f43f; From 9b03f38d0487f3908696242286d934c9b38f9d2a · fixed in 168145c87444619e3e649322bbe7719ecd00d411; From 9b03f38d0487f3908696242286d934c9b38f9d2a · fixed in dcfcd95b3ae7683e8ae55c92284b3430ce614bc7; From 9b03f38d0487f3908696242286d934c9b38f9d2a · fixed in 9ca8c7452493d915f9bbf2f39331e6c583d07a23; From 9b03f38d0487f3908696242286d934c9b38f9d2a · fixed in 3265ad619987cb551edaf797ed056d80ac450225; From 9b03f38d0487f3908696242286d934c9b38f9d2a · fixed in 3db5647984de03d9cae0dcddb509b058351f0ee4
- Linux Linux
2.6.28
- KernelLinux
From 2.6.28 · fixed in 6.1.168; From 6.2.0 · fixed in 6.6.131; From 6.7.0 · fixed in 6.12.80; From 6.13.0 · fixed in 6.18.21; From 6.19.0 · fixed in 6.19.11