A flaw was found in the netfilter subsystem in the Linux kernel. The nft_byteorder_eval() function iterates through writing 8 bytes per iteration to an array of 4 byte fields, effectively overwriting part of the previously written element. This could lead to a local user with CAP_NET_ADMIN access privilege causing a denial of service or breaking netfilter functionality.
A flaw was found in the netfilter subsystem in the Linux kernel. The
nft_byteorder_eval()function iterates through writing 8 bytes per iteration to an array of 4 byte fields, effectively overwriting part of the previously written element. This could lead to a local user with CAP_NET_ADMIN access privilege causing a denial of service or breaking netfilter functionality.