netfilter nft_payload bitwise validation flaw (CVE-2022-1015)

Aynı bug/CVE (CVE-2022-1015): bkz. canonical not nf_tables register validation flaws.

Mechanism

Bu not, CVE-2022-1015'in nft_payload/nft_bitwise üzerinden ifade edilen exploitation görünümüydü. Aynı kök neden (nf_tables register-index validation'ında integer overflow → struct nft_regs'e OOB read/write) artık tek bir kanonik notta toplandı: nf_tables register validation flaws.

Walkthrough

Tam walkthrough canonical not'ta: nf_tables register validation flaws.

References

• CVE-2022-1015: A validation flaw in Netfilter leading to LPE (anatomic.rip)
• oss-security — CVE-2022-1015, CVE-2022-1016 in nf_tables