PT-2024-14667 · Linux+4 · Linux Kernel+4
Published
2023-09-06
·
Updated
2025-09-29
·
CVE-2023-52628
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux Kernel versions prior to 4.1 cycle and all versions after 4.1 cycle before the fix
Description
The issue is related to a stack-based buffer overflow in the netfilter component of the Linux kernel. If
priv->len is a multiple of 4, then dst[len / 4] can write past the destination array, leading to stack corruption. This occurs because a construct is necessary to clean the remainder of the register in case ->len is not a multiple of the register size. The bug was added in the 4.1 cycle and then copied or inherited when tcp/sctp and ip option support was added.Recommendations
As a temporary workaround, consider disabling the
nft exthdr function until a patch is available.
Restrict access to the vulnerable netfilter module to minimize the risk of exploitation.
Avoid using the priv->len variable in the affected code until the issue is resolved.
Update to a version of the Linux Kernel that includes the fix for the netfilter: nftables: exthdr: fix 4-byte stack OOB write issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Hat
Red Os
Suse