[SRU][F/J/L/M][PATCH 0/1] CVE-2023-39189

[Magali Lemes]

[Impact]
A flaw was found in the Netfilter subsystem in the Linux kernel. The
nfnl_osf_add_callback function did not validate the user mode controlled
opt_num field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to
trigger an out-of-bounds read, leading to a crash or information disclosure.

[Backport]
Clean cherry-pick.

[Test]
Compile and boot tested.

[Regresson potential]
Affects netfilter passive OS fingerprinting.

Wander Lairson Costa (1):
  netfilter: nfnetlink_osf: avoid OOB read

 net/netfilter/nfnetlink_osf.c | 8 ++++++++
 1 file changed, 8 insertions(+)

-- 
2.34.1