CVE-2024-42269

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50

Description The issue is related to a potential null pointer dereference in the ip6table nat table init() function. This function accesses net->gen->ptr[ip6table nat net ops.id], but it is exposed to user space before the entry is allocated via register pernet subsys(). To fix this, register pernet subsys() should be called before xt register template().

Recommendations To resolve the issue, update to Linux kernel version 6.6.50 or later. As a temporary workaround, consider restricting access to the ip6table nat table init() function until a patch is available.