Loading HuntDB...

GHSA-wjwq-gx2g-vrjg

GitHub Security Advisory

⚠ Unreviewed MODERATE Has CVE

Advisory Details

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()

nf_osf_find() incorrectly returns true on mismatch, this leads to
copying uninitialized memory area in nft_osf which can be used to leak
stale kernel stack data to userspace.

Related CVEs

Key Information

GHSA ID
GHSA-wjwq-gx2g-vrjg
Published
April 28, 2024 3:30 PM
Last Modified
June 3, 2024 6:53 PM
CVSS Score
5.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: June 12, 2025 6:24 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.