CVE-2021-46992

Summary

CVE-2021-46992 is a vulnerability affecting the Linux kernel's netfilter and nftables components. The issue stems from storing the number of buckets in 32-bit variables, potentially leading to overflows in the function nft_hash_buckets(). This flaw was discovered during syzkaller testing, with UBSAN reporting a shift-out-of-bounds error. The vulnerability can be traced to a call in nft_hash_estimate, and it can be exploited through network traffic handling, leading to potential denial-of-service attacks or unauthorized access. The affected kernel versions include 5.12.0-rc7-syzkaller.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.