{"id":"CVE-2024-42070","revision":"0d94cad17b1c433d9d204477a5e88804","records":[{"revision":"0d94cad17b1c433d9d204477a5e88804","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-42070","aliases":[],"title":"netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers\n\nregister store validation for NFT_DATA_VALUE is conditional, however,\nthe datatype is always either NFT_DATA_VALUE or NFT_DATA_VERDICT. This\nonly requires a new helper function to infer the register type from the\nset datatype so this conditional check can be removed. Otherwise,\npointer to chain object can be leaked through the registers.","state":0,"publishedAt":"2024-07-29T15:52:34.061+00:00","modifiedAt":"2026-10-15T00:47:26.284+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"include/net/netfilter/nf_tables.h\",\n                        \"net/netfilter/nf_tables_api.c\",\n                        \"net/netfilter/nft_lookup.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"96518518cc417bb0a8c80b9fb736202e28acdf96\",\n                            \"lessThan\": \"40188a25a9847dbeb7ec67517174a835a677752f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"96518518cc417bb0a8c80b9fb736202e28acdf96\",\n                            \"lessThan\": \"23752737c6a618e994f9a310ec2568881a6b49c4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"96518518cc417bb0a8c80b9fb736202e28acdf96\",\n                            \"lessThan\": \"5d43d789b57943720dca4181a05f6477362b94cf\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"96518518cc417bb0a8c80b9fb736202e28acdf96\",\n                            \"lessThan\": \"461302e07f49687ffe7d105fa0a330c07c7646d8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"96518518cc417bb0a8c80b9fb736202e28acdf96\",\n                            \"lessThan\": \"efb27ad05949403848f487823b597ed67060e007\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"96518518cc417bb0a8c80b9fb736202e28acdf96\",\n                            \"lessThan\": \"952bf8df222599baadbd4f838a49c4fef81d2564\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"96518518cc417bb0a8c80b9fb736202e28acdf96\",\n                            \"lessThan\": \"41a6375d48deaf7f730304b5153848bfa1c2980f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"96518518cc417bb0a8c80b9fb736202e28acdf96\",\n                            \"lessThan\": \"7931d32955e09d0a11b1fe0b6aac1bfa061c005c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"include/net/netfilter/nf_tables.h\",\n                        \"net/netfilter/nf_tables_api.c\",\n                        \"net/netfilter/nft_lookup.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"3.13\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.13\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.19.317\",\n                            \"lessThanOrEqual\": \"4.19.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.279\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.221\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.162\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.97\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.37\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.9.8\",\n                            \"lessThanOrEqual\": \"6.9.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.10\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/40188a25a9847dbeb7ec67517174a835a677752f","https://git.kernel.org/stable/c/23752737c6a618e994f9a310ec2568881a6b49c4","https://git.kernel.org/stable/c/5d43d789b57943720dca4181a05f6477362b94cf","https://git.kernel.org/stable/c/461302e07f49687ffe7d105fa0a330c07c7646d8","https://git.kernel.org/stable/c/efb27ad05949403848f487823b597ed67060e007","https://git.kernel.org/stable/c/952bf8df222599baadbd4f838a49c4fef81d2564","https://git.kernel.org/stable/c/41a6375d48deaf7f730304b5153848bfa1c2980f","https://git.kernel.org/stable/c/7931d32955e09d0a11b1fe0b6aac1bfa061c005c"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-42070","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-42070","identifiers":["CVE-2024-42070"]},"retained":false,"historicalAffected":[]}],"coverage":[]}