CVE-2024-42269

netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().

State: Published
Severity: Not scored
Published: Aug 17, 2024
Updated: May 11, 2026
Reserved: Jul 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().

ip6table_nat_table_init() accesses net->gen->ptr[ip6table_nat_net_ops.id], but the function is exposed to user space before the entry is allocated via register_pernet_subsys().

Let's call register_pernet_subsys() before xt_register_template().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 to before 419ee6274c5153b89c4393c1946faa4c3cad4f9eAffected fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 to before 91b6df6611b7edb28676c4f63f90c56c30d3e601Affected fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 to before e85b9b6a87be4cb3710082038b677e97f2389003Affected fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 to before 87dba44e9471b79b255d0736858a897332db9226Affected fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 to before c22921df777de5606f1047b1345b8d22ef1c0b34Affected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.165 through 5.15.Not affected 6.1.104 through 6.1.Not affected 6.6.45 through 6.6.Not affected 6.10.4 through 6.10.Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 to before 419ee6274c5153b89c4393c1946faa4c3cad4f9eAffected
fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 to before 91b6df6611b7edb28676c4f63f90c56c30d3e601Affected
fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 to before e85b9b6a87be4cb3710082038b677e97f2389003Affected
fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 to before 87dba44e9471b79b255d0736858a897332db9226Affected
fdacd57c79b79a03c7ca88f706ad9fb7b46831c1 to before c22921df777de5606f1047b1345b8d22ef1c0b34Affected

LinuxLinux

5.15Affected
before 5.15Not affected
5.15.165 through 5.15.*Not affected
6.1.104 through 6.1.*Not affected
6.6.45 through 6.6.*Not affected
6.10.4 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.