In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c, aka CID-1cc5ef91d2ff.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25211
Reference (s):
- https://security.netapp.com/advisory/ntap-20201009-0001/
- DEBIAN:DSA-4774
- URL: https://www.debian.org/security/2020/dsa-4774
- FEDORA:FEDORA-2020-3c6fedeb83
- URL: https://lists.fedoraproject.org/archives/list/[email protected]/message/BL2O4JAMPJG4YMLLJ7JFDHDJRXN4RKTC/