CVE-2024-57947

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the netfilter module in the Linux kernel, specifically with the nf set pipapo function. The problem arises when the initial buffer is not properly initialized, leading to incorrect results in the map search step. This occurs when the size of the first field is smaller than the maximum size, causing one-bits to leak into future rounds' result maps. As a result, pipapo finds incorrect matching results for sets where the first field size is not the largest.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.