CVE-2024-42070

A flaw was found in the Netfilter nf_tables subsystem of the Linux kernel. A local user can exploit this vulnerability due to improper validation when storing values into data registers, allowing internal chain object pointers to be exposed. This issue results in information disclosure, which can facilitate further attacks by assisting in the bypass of kernel memory protections.

This vulnerability is rated as having Moderate impact by Red Hat because exploitation is confined to local authenticated users and the security consequence is restricted to information disclosure rather than direct kernel compromise. To interact with the affected nftables functionality, an attacker must hold administrative network permissions (CAP_NET_ADMIN), which standard unprivileged users might only obtain within dedicated user namespaces. Because the exposed data involves internal kernel addresses, an attacker cannot achieve arbitrary code execution or elevate privileges directly without chaining this flaw with a separate exploit to bypass memory protections like KASLR.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.