[bionic:linux-hwe][PATCH 0/1] CVE-2021-22555

Benjamin M Romer benjamin.romer at canonical.com
Thu Jul 22 15:12:07 UTC 2021


A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered
in net/netfilter/x_tables.c. This allows an attacker to gain privileges or
cause a DoS (via heap memory corruption) through user name space.

Florian Westphal (1):
  netfilter: x_tables: fix compat match/target pad out-of-bound write

 net/ipv4/netfilter/arp_tables.c |  2 ++
 net/ipv4/netfilter/ip_tables.c  |  2 ++
 net/ipv6/netfilter/ip6_tables.c |  2 ++
 net/netfilter/x_tables.c        | 10 ++--------
 4 files changed, 8 insertions(+), 8 deletions(-)

-- 
2.30.2




More information about the kernel-team mailing list