{"id":"DEBIAN-CVE-2024-56650","details":"In the Linux kernel, the following vulnerability has been resolved:  netfilter: x_tables: fix LED ID check in led_tg_check()  Syzbot has reported the following BUG detected by KASAN:  BUG: KASAN: slab-out-of-bounds in strlen+0x58/0x70 Read of size 1 at addr ffff8881022da0c8 by task repro/5879 ... Call Trace:  \u003cTASK\u003e  dump_stack_lvl+0x241/0x360  ? __pfx_dump_stack_lvl+0x10/0x10  ? __pfx__printk+0x10/0x10  ? _printk+0xd5/0x120  ? __virt_addr_valid+0x183/0x530  ? __virt_addr_valid+0x183/0x530  print_report+0x169/0x550  ? __virt_addr_valid+0x183/0x530  ? __virt_addr_valid+0x183/0x530  ? __virt_addr_valid+0x45f/0x530  ? __phys_addr+0xba/0x170  ? strlen+0x58/0x70  kasan_report+0x143/0x180  ? strlen+0x58/0x70  strlen+0x58/0x70  kstrdup+0x20/0x80  led_tg_check+0x18b/0x3c0  xt_check_target+0x3bb/0xa40  ? __pfx_xt_check_target+0x10/0x10  ? stack_depot_save_flags+0x6e4/0x830  ? nft_target_init+0x174/0xc30  nft_target_init+0x82d/0xc30  ? __pfx_nft_target_init+0x10/0x10  ? nf_tables_newrule+0x1609/0x2980  ? nf_tables_newrule+0x1609/0x2980  ? rcu_is_watching+0x15/0xb0  ? nf_tables_newrule+0x1609/0x2980  ? nf_tables_newrule+0x1609/0x2980  ? __kmalloc_noprof+0x21a/0x400  nf_tables_newrule+0x1860/0x2980  ? __pfx_nf_tables_newrule+0x10/0x10  ? __nla_parse+0x40/0x60  nfnetlink_rcv+0x14e5/0x2ab0  ? __pfx_validate_chain+0x10/0x10  ? __pfx_nfnetlink_rcv+0x10/0x10  ? __lock_acquire+0x1384/0x2050  ? netlink_deliver_tap+0x2e/0x1b0  ? __pfx_lock_release+0x10/0x10  ? netlink_deliver_tap+0x2e/0x1b0  netlink_unicast+0x7f8/0x990  ? __pfx_netlink_unicast+0x10/0x10  ? __virt_addr_valid+0x183/0x530  ? __check_object_size+0x48e/0x900  netlink_sendmsg+0x8e4/0xcb0  ? __pfx_netlink_sendmsg+0x10/0x10  ? aa_sock_msg_perm+0x91/0x160  ? __pfx_netlink_sendmsg+0x10/0x10  __sock_sendmsg+0x223/0x270  ____sys_sendmsg+0x52a/0x7e0  ? __pfx_____sys_sendmsg+0x10/0x10  __sys_sendmsg+0x292/0x380  ? __pfx___sys_sendmsg+0x10/0x10  ? lockdep_hardirqs_on_prepare+0x43d/0x780  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10  ? exc_page_fault+0x590/0x8c0  ? do_syscall_64+0xb6/0x230  do_syscall_64+0xf3/0x230  entry_SYSCALL_64_after_hwframe+0x77/0x7f ...  \u003c/TASK\u003e  Since an invalid (without '\\0' byte at all) byte sequence may be passed from userspace, add an extra check to ensure that such a sequence is rejected as possible ID and so never passed to 'kstrdup()' and further.","modified":"2026-09-15T09:03:17.037846842Z","published":"2024-12-27T15:15:24.783Z","upstream":["CVE-2024-56650"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2024-56650"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.123-1"}]}],"versions":["6.1.106-1","6.1.106-2","6.1.106-3","6.1.112-1","6.1.115-1","6.1.119-1","6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1","6.1.52-1","6.1.55-1","6.1.55-1~bpo11+1","6.1.64-1","6.1.66-1","6.1.67-1","6.1.69-1","6.1.69-1~bpo11+1","6.1.76-1","6.1.76-1~bpo11+1","6.1.82-1","6.1.85-1","6.1.90-1","6.1.90-1~bpo11+1","6.1.94-1","6.1.94-1~bpo11+1","6.1.98-1","6.1.99-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-56650.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.5-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-56650.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.5-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-56650.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"}]}