Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Yi Chen

Researcher fromRed Hat
#45220of 53,632
5.5Total CVSS
Vulnerabilities · 1
PT-2025-3672
5.5
2024-07-17
Linux · Linux Kernel · CVE-2024-57947
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to the netfilter module in the Linux kernel, specifically with the `nf set pipapo` function. The problem arises when the initial buffer is not properly initialized, leading to incorrect results in the map search step. This occurs when the size of the first field is smaller than the maximum size, causing one-bits to leak into future rounds' result maps. As a result, `pipapo` finds incorrect matching results for sets where the first field size is not the largest. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.