CVE-2024-56650

Summary

CVE-2024-56650 is a vulnerability in the Linux kernel's netfilter that affects the x_tables module. A BUG was detected by KASAN, revealing a slab-out-of-bounds issue in the 'strlen' function, specifically in the 'led_tg_check()' function. This issue arises from an invalid byte sequence being passed from userspace, which may lack a null byte ('\0'). To mitigate this risk, an extra check is required to reject such sequences as possible IDs, preventing them from being passed to 'kstrdup()' and further, thus averting potential security vulnerabilities.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.