CVE-2024-35962

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the netfilter component of the Linux kernel and is caused by incomplete validation of user input. This can potentially allow an attacker to cause a denial of service. The vulnerability is associated with the use of copy from sockptr() and copy from sockptr offset() calls in do replace() handlers. To address this, validation of the @optlen variable can be performed before calling xt alloc table info() to prevent the issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.