Linux Kernel Netfilter Conntrack Type Confusion Info Disclosure (ZDI-24-1182)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: Linux Kernel Netfilter Conntrack Type Confusion Information Disclosure Vulnerability 2. Vulnerability IDs: - ZDI-24-1182 - ZDI-CAN-24591 3. CVE ID: Not provided 4. CVSS Score: 6.5, AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N 5. Affected Vendor: Linux 6. Affected Product: Kernel 7. Vulnerability Details: - This vulnerability allows a local attacker to disclose sensitive information on affected Linux kernel installations. - The attacker must first gain the ability to execute low-privilege code on the target system in order to exploit this vulnerability. - The issue resides in the connection tracking implementation, where user-supplied data is not properly validated, leading to a type confusion condition. - Attackers can exploit this vulnerability in combination with other vulnerabilities to execute arbitrary code in kernel context. 8. Additional Details: - Linux has released updates to fix this vulnerability. - More details can be found at the following link: https://patchwork.kernel.org/project/netdevbpf/patch/20240717215214.225394-2-pablo@netfilter.org/ 9. Disclosure Timeline: - 2024-07-12: Vulnerability reported to vendor - 2024-08-27: Coordinated public disclosure of vulnerability advisory - 2024-08-27: Vulnerability advisory updated 10. Credit: - HexRabbit (@h3xr4bb1t) from the DEVCORE research team. This information provides a detailed description of the vulnerability, including its scope of impact, exploitation prerequisites, and remediation measures.

Goal Reached Thanks to every supporter — we hit 100%!

Linux Kernel Netfilter Conntrack Type Confusion Info Disclosure (ZDI-24-1182)