CyberRota Analysis
AI-GeneratedA vulnerability in the Linux kernel's netfilter component affects the xt_hashlimit feature, specifically related to the XT_HASHLIMIT_RATE_MATCH flag. This flaw can lead to uninitialized access to the burst field in the dsthash_ent structure, potentially allowing unauthorized access or manipulation of network traffic. System administrators and organizations utilizing Linux-based systems with netfilter configurations should prioritize applying updates to mitigate this risk.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH The XT_HASHLIMIT_RATE_MATCH flag mode changes the semantics of the dsthash_ent structure which represents an entry in the hashtable. There is a union area which uses a different layout to express the rate match mode. Update .checkentry path to validate the XT_HASHLIMIT_RATE_MATCH mode flag is requested by two or more different rules that refer to the same hashtable. Otherwise, uninitialized access to the burst field in the union is possible. Reject the use of the XT_HASHLIMIT_RATE_MATCH mode flag if set on by revision less than 3 too.