VULNERABILITY INTELLIGENCE
CVE-2024-42269
CVSS score5.5 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2024-08-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). ip6table_nat_table_init() accesses net->gen->ptr[ip6table_nat_net_ops.id], but the function is exposed to user space before the entry is allocated via register_pernet_subsys(). Let's call register_pernet_subsys() before xt_register_template().
Weakness classification
- nvd@nist.gov: CWE-476