Intel

CVE-2024-47685

Siemens ProductCERT Advisory SSA-265688

noneEPSS 1.4 %

Beschreibung

Im Linux-Kernel wurde folgende Schwachstelle behoben: `netfilter`: `nf_reject_ipv6`: Korrektur von `nf_reject_ip6_tcphdr_put()` syzbot meldete, dass `nf_reject_ip6_tcphdr_put()` möglicherweise Müll auf den vier reservierten TCP-Bits (`th->res1`) sendet. Verwenden Sie `skb_put_zero()`, um den gesamten TCP-Header zu löschen, wie in `nf_reject_ip_tcphdr_put()` gemacht. FEHLER: KMSAN: uninitialisierte Wert in `nf_reject_ip6_tcphdr_put()+0x688/0x6c0 net/ipv6/netfilter/nf_reject_ipv6.c:255` `nf_reject_ip6_tcphdr_put()+0x688/0x6c0 net/ipv6/netfilter/nf_reject_ipv6.c:255` `nf_send_reset6+0xd84/0x15b0 net/ipv6/netfilter/nf_reject_ipv6.c:344` `nft_reject_inet_eval+0x3c1/0x880 net/netfilter/nft_reject_inet.c:48` `expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline]` `nft_do_chain+0x438/0x22a0 net/netfilter/nf_tables_core.c:288` `nft_do_chain_inet+0x41a/0x4f0 net/netfilter/nft_chain_filter.c:161` `nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]` `nf_hook_slow+0xf4/0x400 net/netfilter/core.c:626` `nf_hook include/linux/netfilter.h:269 [inline]` `NF_HOOK include/linux/netfilter.h:312 [inline]` `ipv6_rcv+0x29b/0x390 net/ipv6/ip6_input.c:310` `__netif_receive_skb_one_core net/core/dev.c:5661 [inline]` `__netif_receive_skb+0x1da/0xa00 net/core/dev.c:5775` `process_backlog+0x4ad/0xa50 net/core/dev.c:6108` `__napi_poll+0xe7/0x980 net/core/dev.c:6772` `napi_poll net/core/dev.c:6841 [inline]` `net_rx_action+0xa5a/0x19b0 net/core/dev.c:6963` `handle_softirqs+0x1ce/0x800 kernel/softirq.c:554` `__do_softirq+0x14/0x1a kernel/softirq.c:588` `do_softirq+0x9a/0x100 kernel/softirq.c:455` `__local_bh_enable_ip+0x9f/0xb0 kernel/softirq.c:382` `local_bh_enable include/linux/bottom_half.h:33 [inline]` `rcu_read_unlock_bh include/linux/rcupdate.h:908 [inline]` `__dev_queue_xmit+0x2692/0x5610 net/core/dev.c:4450` `dev_queue_xmit include/linux/netdevice.h:3105 [inline]` `neigh_resolve_output+0x9ca/0xae0 net/core/neighbour.c:1565` `neigh_output include/net/neighbour.h:542 [inline]` `ip6_finish_output2+0x2347/0x2ba0 net/ipv6/ip6_output.c:141` `__ip6_finish_output net/ipv6/ip6_output.c:215 [inline]` `ip6_finish_output+0xbb8/0x14b0 net/ipv6/ip6_output.c:226` `NF_HOOK_COND include/linux/netfilter.h:303 [inline]` `ip6_output+0x356/0x620 net/ipv6/ip6_output.c:247` `dst_output include/net/dst.h:450 [inline]` `NF_HOOK include/linux/netfilter.h:314 [inline]` `ip6_xmit+0x1ba6/0x25d0 net/ipv6/ip6_output.c:366` `inet6_csk_xmit+0x442/0x530 net/ipv6/inet6_connection_sock.c:135` `__tcp_transmit_skb+0x3b07/0x4880 net/ipv4/tcp_output.c:1466` `tcp_transmit_skb net/ipv4/tcp_output.c:1484 [inline]` `tcp_connect+0x35b6/0x7130 net/ipv4/tcp_output.c:4143` `tcp_v6_connect+0x1bcc/0x1e40 net/ipv6/tcp_ipv6.c:333` `__inet_stream_connect+0x2ef/0x1730 net/ipv4/af_inet.c:679` `inet_stream_connect+0x6a/0xd0 net/ipv4/af_inet.c:750` `__sys_connect_file net/socket.c:2061 [inline]` `__sys_connect+0x606/0x690 net/socket.c:2078` `__do_sys_connect net/socket.c:2088 [inline]` `__se_sys_connect net/socket.c:2085 [inline]` `__x64_sys_connect+0x91/0xe0 net/socket.c:2085` `x64_sys_call+0x27a5/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:43` `do_syscall_x64 arch/x86/entry/common.c:52 [inline]` `do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83` `entry_SYSCALL_64_after_hwframe+0x77/0x7f` Uninitialisierter Wert wurde im Speicher gespeichert bei: `nf_reject_ip6_tcphdr_put()+0x60c/0x6c0 net/ipv6/netfilter/nf_reject_ipv6.c:249` `nf_send_reset6+0xd84/0x15b0 net/ipv6/netfilter/nf_reject_ipv6.c:344` `nft_reject_inet_eval+0x3c1/0x880 net/netfilter/nft_reject_inet.c:48` `expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline]` `nft_do_chain+0x438/0x22a0 net/netfilter/nf_tables_core.c:288` `nft_do_chain_inet+0x41a/0x4f0 net/netfilter/nft_chain_filter.c:161` `nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]` `nf_hook_slow+0xf4/0x400 net/netfilter/core.c:626` `nf_hook include/linux/netfilter.h:269 [inline]` `NF_HOOK include/linux/netfilter.h:312 [inline]` `ipv6_rcv+0x29b/0x390 net/ipv6/ip6_input.c:310` `__netif_receive_skb_one_core`

Quelle: SIEMENS_ADVISORYBSIBSI_CSAFSIEMENS_ADVISORYCVELISTV5EUVD

Metriken

Severity
none
Priority-Score
209.72
KEV-Status
—
Exploit-Reife
kein öffentlicher PoC bekannt
XIEM Effective CVSS
—
CVSS v3
0.0
CVSS v4
—
EPSS-Perzentil
70.3 %
Hoch — CVE rangiert über dem Median aller heute bewerteten CVEs (Rang ≥ 36 %).
EPSS-Score
1.4 %
Moderat — Modell schätzt 1-10 % Ausnutzungs-Wahrscheinlichkeit.
Veröffentlicht
2022-02-18 00:00 UTC
CWE
—

Betroffene Betriebssysteme

  • linux

    amazon / amazon_linux

  • linux

    suse / basesystem_module15

  • linux

    debian / debian_linux10.0

  • linux

    debian / debian_linux11.0

  • linux

    debian / debian_linux12.0

  • linux

    debian / debian_linux13.0

  • linux

    suse / development_tools_module15

  • linux

    redhat / enterprise_linux10.0

  • linux

    redhat / enterprise_linux8.0

  • linux

    redhat / enterprise_linux9.0

  • linux

    redhat / enterprise_linux_aus8.4

  • linux

    redhat / enterprise_linux_aus8.6

  • linux

    redhat / enterprise_linux_eus10.0

  • linux

    redhat / enterprise_linux_eus8.4

  • linux

    redhat / enterprise_linux_eus9.4

  • linux

    redhat / enterprise_linux_eus9.6

  • linux

    redhat / enterprise_linux_tus8.6

  • linux

    redhat / enterprise_linux_tus8.8

  • linux

    redhat / enterprise_linux_update_services_for_sap_solutions8.6

  • linux

    redhat / enterprise_linux_update_services_for_sap_solutions8.8

  • linux

    redhat / enterprise_linux_update_services_for_sap_solutions9.0

  • linux

    redhat / enterprise_linux_update_services_for_sap_solutions9.2

  • linux

    opensuse / leap15.3

  • linux

    opensuse / leap15.4

Betroffene Produkte

Aus der Hersteller-/CERT-Meldung extrahierte Produkte und Versionsbereiche. Ein Version-Range wie „<4.14.6“ impliziert die Update-Empfehlung „auf 4.14.6 oder höher aktualisieren“.

  • android

    :linux_kernel::0

  • android

    :linux_kernel:Kernel

  • arista

    cloudvision_agni2024.4.0 – 2025.2.2

  • arista

    cloudvision_portal2024.2.0 – 2026.1.0

  • arista

    velocloud_edge4.5.0 – 6.4.1

  • arista

    velocloud_gateway

  • arista

    velocloud_orchestrator

  • bitnami

    java-min1.9.0

  • Dell

    ECS3.8.1.0

  • Dell

    NetWorkerVirtual Edition

  • Dell

    NetWorkervProxy

  • Dell

    PowerProtect Data Domain7.10.1.70

  • Dell

    PowerProtect Data Domain7.13.1.40

  • Dell

    PowerProtect Data Domain8.3.1.10

  • Dell

    PowerProtect Data Domain8.4.0.0

  • Dell

    PowerProtect Data Domain< 7.10.1.70

    gefixt in 7.10.1.70

  • Dell

    PowerProtect Data Domain< 7.13.1.40

    gefixt in 7.13.1.40

  • Dell

    PowerProtect Data Domain< 8.3.1.10

    gefixt in 8.3.1.10

  • Dell

    PowerProtect Data Domain< 8.4.0.0

    gefixt in 8.4.0.0

  • Dell

    PowerScale OneFSNode Firmware Package 14.1

  • Dell

    Secure Connect GatewayAppliance 5.32.00.18

  • Hitachi Energy

    RTU500< 13.9.1

    gefixt in 13.9.1

  • HPE

    HP-UXOpenSSL Software <A.03.00.15.001

  • IBM

    AIX7.2

Quellen & Referenzen

Verknüpfte CVEs

423 weitere CVEs anzeigen
IDCVE-2024-47685
Siemens ProductCERT Advisory SSA-265688 — CVE-2024-47685 | NEOSEC Intel