CVE - CVE-2024-50251

CVE-ID
CVE-2024-50251	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() If access to offset + length is larger than the skbuff length, then skb_checksum() triggers BUG_ON(). skb_checksum() internally subtracts the length parameter while iterating over skbuff, BUG_ON(len) at the end of it checks that the expected length to be included in the checksum calculation is fully consumed.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0ab3be58b45b996764aba0187b46de19b3e58a72 URL:https://git.kernel.org/stable/c/0ab3be58b45b996764aba0187b46de19b3e58a72 MISC:https://git.kernel.org/stable/c/a661ed364ae6ae88c2fafa9ddc27df1af2a73701 URL:https://git.kernel.org/stable/c/a661ed364ae6ae88c2fafa9ddc27df1af2a73701 MISC:https://git.kernel.org/stable/c/ac7df3fc80fc82bcc3b1e8f6ebc0d2c435d0c534 URL:https://git.kernel.org/stable/c/ac7df3fc80fc82bcc3b1e8f6ebc0d2c435d0c534 MISC:https://git.kernel.org/stable/c/b1d2de8a669fa14c499a385e056944d5352b3b40 URL:https://git.kernel.org/stable/c/b1d2de8a669fa14c499a385e056944d5352b3b40 MISC:https://git.kernel.org/stable/c/c43e0ea848e7b9bef7a682cbc5608022d6d29d7b URL:https://git.kernel.org/stable/c/c43e0ea848e7b9bef7a682cbc5608022d6d29d7b MISC:https://git.kernel.org/stable/c/d3217323525f7596427124359e76ea0d8fcc9874 URL:https://git.kernel.org/stable/c/d3217323525f7596427124359e76ea0d8fcc9874 MISC:https://git.kernel.org/stable/c/d5953d680f7e96208c29ce4139a0e38de87a57fe URL:https://git.kernel.org/stable/c/d5953d680f7e96208c29ce4139a0e38de87a57fe MISC:https://git.kernel.org/stable/c/e3e608cbad376674d19a71ccd0d41804d9393f02 URL:https://git.kernel.org/stable/c/e3e608cbad376674d19a71ccd0d41804d9393f02
Assigning CNA
kernel.org
Date Record Created
20241021	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241021)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)