In the Linux kernel, the following vulnerability has been resolved:
netfilter: br_netfilter: skip conntrack input hook for promisc packets
For historical reasons, when bridge device is in promisc mode, packets that are directed to the taps follow bridge input hook path. This patch adds a workaround to reset conntrack for these packets.
Jianbo Liu reports warning splats in their test infrastructure where cloned packets reach the br_netfilter input hook to confirm the conntrack object.
Scratch one bit from BRINPUTSKB_CB to annotate that this packet has reached the input hook because it is passed up to the bridge device to reach the taps.
[ 57.571874] WARNING: CPU: 1 PID: 0 at net/bridge/brnetfilterhooks.c:616 brnflocalin+0x157/0x180 [brnetfilter] [ 57.572749] Modules linked in: xtMASQUERADE nfconntracknetlink nfnetlink iptablenat xtaddrtype xtconntrack nfnat brnetfilter rpcsecgsskrb5 authrpcgss oidregistry overlay rpcrdma rdmaucm ibiser libiscsi scsitransportisc si ibumad rdmacm ibipoib iwcm ibcm mlx5ib ibuverbs ibcore mlx5ctl mlx5core [ 57.575158] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.8.0+ #19 [ 57.575700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 [ 57.576662] RIP: 0010:brnflocalin+0x157/0x180 [brnetfilter] [ 57.577195] Code: fe ff ff 41 bd 04 00 00 00 be 04 00 00 00 e9 4a ff ff ff be 04 00 00 00 48 89 ef e8 f3 a9 3c e1 66 83 ad b4 00 00 00 04 eb 91 <0f> 0b e9 f1 fe ff ff 0f 0b e9 df fe ff ff 48 89 df e8 b3 53 47 e1 [ 57.578722] RSP: 0018:ffff88885f845a08 EFLAGS: 00010202 [ 57.579207] RAX: 0000000000000002 RBX: ffff88812dfe8000 RCX: 0000000000000000 [ 57.579830] RDX: ffff88885f845a60 RSI: ffff8881022dc300 RDI: 0000000000000000 [ 57.580454] RBP: ffff88885f845a60 R08: 0000000000000001 R09: 0000000000000003 [ 57.581076] R10: 00000000ffff1300 R11: 0000000000000002 R12: 0000000000000000 [ 57.581695] R13: ffff8881047ffe00 R14: ffff888108dbee00 R15: ffff88814519b800 [ 57.582313] FS: 0000000000000000(0000) GS:ffff88885f840000(0000) knlGS:0000000000000000 [ 57.583040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.583564] CR2: 000000c4206aa000 CR3: 0000000103847001 CR4: 0000000000370eb0 [ 57.584194] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.584820] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.585440] Call Trace: [ 57.585721] <IRQ> [ 57.585976] ? _warn+0x7d/0x130 [ 57.586323] ? brnflocalin+0x157/0x180 [brnetfilter] [ 57.586811] ? reportbug+0xf1/0x1c0 [ 57.587177] ? handlebug+0x3f/0x70 [ 57.587539] ? excinvalidop+0x13/0x60 [ 57.587929] ? asmexcinvalidop+0x16/0x20 [ 57.588336] ? brnflocalin+0x157/0x180 [brnetfilter] [ 57.588825] nfhookslow+0x3d/0xd0 [ 57.589188] ? brhandlevlan+0x4b/0x110 [ 57.589579] brpassframeup+0xfc/0x150 [ 57.589970] ? brportflagschange+0x40/0x40 [ 57.590396] brhandleframefinish+0x346/0x5e0 [ 57.590837] ? iptdotable+0x32e/0x430 [ 57.591221] ? brhandlelocalfinish+0x20/0x20 [ 57.591656] brnfhookthresh+0x4b/0xf0 [brnetfilter] [ 57.592286] ? brhandlelocalfinish+0x20/0x20 [ 57.592802] brnfpreroutingfinish+0x178/0x480 [brnetfilter] [ 57.593348] ? brhandlelocalfinish+0x20/0x20 [ 57.593782] ? nfnatipv4prerouting+0x25/0x60 [nfnat] [ 57.594279] brnfprerouting+0x24c/0x550 [brnetfilter] [ 57.594780] ? brnfhookthresh+0xf0/0xf0 [brnetfilter] [ 57.595280] brhandleframe+0x1f3/0x3d0 [ 57.595676] ? brhandlelocalfinish+0x20/0x20 [ 57.596118] ? brhandleframefinish+0x5e0/0x5e0 [ 57.596566] _netifreceiveskbcore+0x25b/0xfc0 [ 57.597017] ? _napibuildskb+0x37/0x40 [ 57.597418] _netifreceiveskblist_core+0xfb/0x220
[
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"339687551220090829560544200097277564139",
"106212756278280352560778308290147294764",
"187533085561903884172703740895637656880",
"19959632513481237055116820857819961290",
"258878834062900350228889026372783314421",
"142008568023067199651711775849145400576",
"316429862734306823813839485914324102578",
"120414667913553312565950549618746398153"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b13db0d16bc7b2a52abcf5cb71334f63faa5dbd6",
"deprecated": false,
"id": "CVE-2024-27018-01bbe868",
"signature_version": "v1",
"target": {
"file": "net/bridge/br_netfilter_hooks.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 2885.0,
"function_hash": "246211859605125100306829696081208420115"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b13db0d16bc7b2a52abcf5cb71334f63faa5dbd6",
"deprecated": false,
"id": "CVE-2024-27018-03bf826b",
"signature_version": "v1",
"target": {
"function": "br_handle_frame_finish",
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"18599846965257706151586312560297888410",
"129426486026323502703190574024630306417",
"122559653378794329632219866598510648382",
"146031950085658836892487125326896795270"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dceb683ab87ca3666a9bb5c0158528b646faedc4",
"deprecated": false,
"id": "CVE-2024-27018-078ea493",
"signature_version": "v1",
"target": {
"file": "net/bridge/br_private.h"
}
},
{
"signature_type": "Function",
"digest": {
"length": 798.0,
"function_hash": "71171400140023795008917942088621768391"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@751de2012eafa4d46d8081056761fa0e9cc8a178",
"deprecated": false,
"id": "CVE-2024-27018-13022492",
"signature_version": "v1",
"target": {
"function": "br_nf_local_in",
"file": "net/bridge/br_netfilter_hooks.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 659.0,
"function_hash": "155583925021249352030760536060587046836"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@751de2012eafa4d46d8081056761fa0e9cc8a178",
"deprecated": false,
"id": "CVE-2024-27018-14b2457a",
"signature_version": "v1",
"target": {
"function": "br_pass_frame_up",
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 3212.0,
"function_hash": "295055553306985230766353243386825043690"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@751de2012eafa4d46d8081056761fa0e9cc8a178",
"deprecated": false,
"id": "CVE-2024-27018-14bfbdc9",
"signature_version": "v1",
"target": {
"function": "br_handle_frame_finish",
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 1768.0,
"function_hash": "155382267474501387363161708070997989316"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f59ac29dea0921637053908fe99268d157bbb9d",
"deprecated": false,
"id": "CVE-2024-27018-21dcbbf2",
"signature_version": "v1",
"target": {
"function": "br_handle_frame",
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"29039955643835843173614740837891909504",
"79194340046975078967325943197497194063",
"312428398410279307132728008909765787278",
"184712016399627374948497549764455619191",
"303715297147884247704160280706318279530",
"2815950018696438495085709506034744596",
"328423560603565706081507415266653399979",
"176850618072777941975583492523880145798",
"128199498079895505529203533351480239710",
"151703787258676959510950277793841742140",
"154874243286737695529233217821985946021",
"89693650157506956051351012378863527738",
"288764416105507936969495286906616727488",
"238029214678511405992095924701717368050",
"139754845278428528955286191785647535810",
"152682988612669794187693129529330391579",
"44884752127607224168087774582277687613",
"178832647392367898298620132640819671491",
"123082929758200092499277482436540786657",
"161187774487806828500156796800444334898",
"192171917367404750867681115100497739205",
"274309550931575320902467352760777375050",
"152122759215972882192513219606820892368",
"25739920708461974770840067764006056759",
"94336085599171324870906805906862258447",
"231505896118153637591228905794673759287"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f59ac29dea0921637053908fe99268d157bbb9d",
"deprecated": false,
"id": "CVE-2024-27018-25f657e9",
"signature_version": "v1",
"target": {
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 659.0,
"function_hash": "155583925021249352030760536060587046836"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43193174510ea4f3ce09b796e559a2fd9f148615",
"deprecated": false,
"id": "CVE-2024-27018-2a739356",
"signature_version": "v1",
"target": {
"function": "br_pass_frame_up",
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"18599846965257706151586312560297888410",
"129426486026323502703190574024630306417",
"122559653378794329632219866598510648382",
"146031950085658836892487125326896795270"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43193174510ea4f3ce09b796e559a2fd9f148615",
"deprecated": false,
"id": "CVE-2024-27018-2a84fcd7",
"signature_version": "v1",
"target": {
"file": "net/bridge/br_private.h"
}
},
{
"signature_type": "Function",
"digest": {
"length": 2586.0,
"function_hash": "159148043710676164896682383494427380137"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dceb683ab87ca3666a9bb5c0158528b646faedc4",
"deprecated": false,
"id": "CVE-2024-27018-2b2b6765",
"signature_version": "v1",
"target": {
"function": "br_handle_frame_finish",
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 341.0,
"function_hash": "290113714032545637002555301868287800971"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b13db0d16bc7b2a52abcf5cb71334f63faa5dbd6",
"deprecated": false,
"id": "CVE-2024-27018-2fc879c3",
"signature_version": "v1",
"target": {
"function": "nf_ct_bridge_in",
"file": "net/bridge/netfilter/nf_conntrack_bridge.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 341.0,
"function_hash": "290113714032545637002555301868287800971"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dceb683ab87ca3666a9bb5c0158528b646faedc4",
"deprecated": false,
"id": "CVE-2024-27018-3117064f",
"signature_version": "v1",
"target": {
"function": "nf_ct_bridge_in",
"file": "net/bridge/netfilter/nf_conntrack_bridge.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 798.0,
"function_hash": "71171400140023795008917942088621768391"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f59ac29dea0921637053908fe99268d157bbb9d",
"deprecated": false,
"id": "CVE-2024-27018-343ff515",
"signature_version": "v1",
"target": {
"function": "br_nf_local_in",
"file": "net/bridge/br_netfilter_hooks.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 1741.0,
"function_hash": "10590614321704461698568408174886068293"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b13db0d16bc7b2a52abcf5cb71334f63faa5dbd6",
"deprecated": false,
"id": "CVE-2024-27018-39243538",
"signature_version": "v1",
"target": {
"function": "br_handle_frame",
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 659.0,
"function_hash": "155583925021249352030760536060587046836"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b13db0d16bc7b2a52abcf5cb71334f63faa5dbd6",
"deprecated": false,
"id": "CVE-2024-27018-4292ef7c",
"signature_version": "v1",
"target": {
"function": "br_pass_frame_up",
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 659.0,
"function_hash": "155583925021249352030760536060587046836"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dceb683ab87ca3666a9bb5c0158528b646faedc4",
"deprecated": false,
"id": "CVE-2024-27018-44e80ab8",
"signature_version": "v1",
"target": {
"function": "br_pass_frame_up",
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"29039955643835843173614740837891909504",
"79194340046975078967325943197497194063",
"312428398410279307132728008909765787278",
"184712016399627374948497549764455619191",
"303715297147884247704160280706318279530",
"2815950018696438495085709506034744596",
"328423560603565706081507415266653399979",
"176850618072777941975583492523880145798",
"128199498079895505529203533351480239710",
"151703787258676959510950277793841742140",
"40697608571229781235879767825022901644",
"23966071189439623786904773163147913740",
"288764416105507936969495286906616727488",
"238029214678511405992095924701717368050",
"139754845278428528955286191785647535810",
"152682988612669794187693129529330391579",
"44884752127607224168087774582277687613",
"178832647392367898298620132640819671491",
"123082929758200092499277482436540786657",
"161187774487806828500156796800444334898",
"192171917367404750867681115100497739205",
"274309550931575320902467352760777375050",
"152122759215972882192513219606820892368",
"25739920708461974770840067764006056759",
"94336085599171324870906805906862258447",
"231505896118153637591228905794673759287"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dceb683ab87ca3666a9bb5c0158528b646faedc4",
"deprecated": false,
"id": "CVE-2024-27018-44fc783a",
"signature_version": "v1",
"target": {
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"241761581022130743736309613613784357498",
"125737591456343536647248626444473431874",
"165133418132386624916928007749893362801",
"128265008733465533751740757248124177676",
"62884952843744061373952889160712929151",
"335581262839156328206944817277869107947",
"287891123013447215792626809653646765414",
"256866135003508236599004609660280245443",
"318785817490040408764688641558849446030"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@751de2012eafa4d46d8081056761fa0e9cc8a178",
"deprecated": false,
"id": "CVE-2024-27018-55a3f92d",
"signature_version": "v1",
"target": {
"file": "net/bridge/netfilter/nf_conntrack_bridge.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 3212.0,
"function_hash": "295055553306985230766353243386825043690"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f59ac29dea0921637053908fe99268d157bbb9d",
"deprecated": false,
"id": "CVE-2024-27018-62e77749",
"signature_version": "v1",
"target": {
"function": "br_handle_frame_finish",
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"29039955643835843173614740837891909504",
"79194340046975078967325943197497194063",
"312428398410279307132728008909765787278",
"184712016399627374948497549764455619191",
"303715297147884247704160280706318279530",
"2815950018696438495085709506034744596",
"328423560603565706081507415266653399979",
"176850618072777941975583492523880145798",
"128199498079895505529203533351480239710",
"151703787258676959510950277793841742140",
"154874243286737695529233217821985946021",
"89693650157506956051351012378863527738",
"288764416105507936969495286906616727488",
"238029214678511405992095924701717368050",
"139754845278428528955286191785647535810",
"152682988612669794187693129529330391579",
"44884752127607224168087774582277687613",
"178832647392367898298620132640819671491",
"123082929758200092499277482436540786657",
"161187774487806828500156796800444334898",
"192171917367404750867681115100497739205",
"274309550931575320902467352760777375050",
"152122759215972882192513219606820892368",
"25739920708461974770840067764006056759",
"94336085599171324870906805906862258447",
"231505896118153637591228905794673759287"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@751de2012eafa4d46d8081056761fa0e9cc8a178",
"deprecated": false,
"id": "CVE-2024-27018-6db2a05d",
"signature_version": "v1",
"target": {
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"18599846965257706151586312560297888410",
"129426486026323502703190574024630306417",
"122559653378794329632219866598510648382",
"146031950085658836892487125326896795270"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@751de2012eafa4d46d8081056761fa0e9cc8a178",
"deprecated": false,
"id": "CVE-2024-27018-6df14937",
"signature_version": "v1",
"target": {
"file": "net/bridge/br_private.h"
}
},
{
"signature_type": "Function",
"digest": {
"length": 3212.0,
"function_hash": "295055553306985230766353243386825043690"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43193174510ea4f3ce09b796e559a2fd9f148615",
"deprecated": false,
"id": "CVE-2024-27018-78abe91b",
"signature_version": "v1",
"target": {
"function": "br_handle_frame_finish",
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 1662.0,
"function_hash": "253088195773117117480968798296257644563"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dceb683ab87ca3666a9bb5c0158528b646faedc4",
"deprecated": false,
"id": "CVE-2024-27018-7bf90d7e",
"signature_version": "v1",
"target": {
"function": "br_handle_frame",
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 1768.0,
"function_hash": "155382267474501387363161708070997989316"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@751de2012eafa4d46d8081056761fa0e9cc8a178",
"deprecated": false,
"id": "CVE-2024-27018-8ea56dd1",
"signature_version": "v1",
"target": {
"function": "br_handle_frame",
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 341.0,
"function_hash": "290113714032545637002555301868287800971"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@751de2012eafa4d46d8081056761fa0e9cc8a178",
"deprecated": false,
"id": "CVE-2024-27018-9278cd37",
"signature_version": "v1",
"target": {
"function": "nf_ct_bridge_in",
"file": "net/bridge/netfilter/nf_conntrack_bridge.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"18599846965257706151586312560297888410",
"129426486026323502703190574024630306417",
"122559653378794329632219866598510648382",
"146031950085658836892487125326896795270"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f59ac29dea0921637053908fe99268d157bbb9d",
"deprecated": false,
"id": "CVE-2024-27018-961ed752",
"signature_version": "v1",
"target": {
"file": "net/bridge/br_private.h"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"339687551220090829560544200097277564139",
"106212756278280352560778308290147294764",
"187533085561903884172703740895637656880",
"19959632513481237055116820857819961290",
"258878834062900350228889026372783314421",
"142008568023067199651711775849145400576",
"316429862734306823813839485914324102578",
"120414667913553312565950549618746398153"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dceb683ab87ca3666a9bb5c0158528b646faedc4",
"deprecated": false,
"id": "CVE-2024-27018-977f5d01",
"signature_version": "v1",
"target": {
"file": "net/bridge/br_netfilter_hooks.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"29039955643835843173614740837891909504",
"79194340046975078967325943197497194063",
"312428398410279307132728008909765787278",
"184712016399627374948497549764455619191",
"303715297147884247704160280706318279530",
"2815950018696438495085709506034744596",
"328423560603565706081507415266653399979",
"176850618072777941975583492523880145798",
"128199498079895505529203533351480239710",
"151703787258676959510950277793841742140",
"154874243286737695529233217821985946021",
"89693650157506956051351012378863527738",
"288764416105507936969495286906616727488",
"238029214678511405992095924701717368050",
"139754845278428528955286191785647535810",
"152682988612669794187693129529330391579",
"44884752127607224168087774582277687613",
"178832647392367898298620132640819671491",
"123082929758200092499277482436540786657",
"161187774487806828500156796800444334898",
"192171917367404750867681115100497739205",
"274309550931575320902467352760777375050",
"152122759215972882192513219606820892368",
"25739920708461974770840067764006056759",
"94336085599171324870906805906862258447",
"231505896118153637591228905794673759287"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43193174510ea4f3ce09b796e559a2fd9f148615",
"deprecated": false,
"id": "CVE-2024-27018-a173814e",
"signature_version": "v1",
"target": {
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 798.0,
"function_hash": "71171400140023795008917942088621768391"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b13db0d16bc7b2a52abcf5cb71334f63faa5dbd6",
"deprecated": false,
"id": "CVE-2024-27018-a28cfc64",
"signature_version": "v1",
"target": {
"function": "br_nf_local_in",
"file": "net/bridge/br_netfilter_hooks.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"18599846965257706151586312560297888410",
"129426486026323502703190574024630306417",
"122559653378794329632219866598510648382",
"146031950085658836892487125326896795270"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b13db0d16bc7b2a52abcf5cb71334f63faa5dbd6",
"deprecated": false,
"id": "CVE-2024-27018-a4cac2d5",
"signature_version": "v1",
"target": {
"file": "net/bridge/br_private.h"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"29039955643835843173614740837891909504",
"79194340046975078967325943197497194063",
"312428398410279307132728008909765787278",
"184712016399627374948497549764455619191",
"303715297147884247704160280706318279530",
"2815950018696438495085709506034744596",
"328423560603565706081507415266653399979",
"176850618072777941975583492523880145798",
"128199498079895505529203533351480239710",
"151703787258676959510950277793841742140",
"154874243286737695529233217821985946021",
"89693650157506956051351012378863527738",
"288764416105507936969495286906616727488",
"238029214678511405992095924701717368050",
"139754845278428528955286191785647535810",
"152682988612669794187693129529330391579",
"44884752127607224168087774582277687613",
"178832647392367898298620132640819671491",
"123082929758200092499277482436540786657",
"161187774487806828500156796800444334898",
"192171917367404750867681115100497739205",
"274309550931575320902467352760777375050",
"152122759215972882192513219606820892368",
"25739920708461974770840067764006056759",
"94336085599171324870906805906862258447",
"231505896118153637591228905794673759287"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b13db0d16bc7b2a52abcf5cb71334f63faa5dbd6",
"deprecated": false,
"id": "CVE-2024-27018-a84ae3d4",
"signature_version": "v1",
"target": {
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"241761581022130743736309613613784357498",
"125737591456343536647248626444473431874",
"165133418132386624916928007749893362801",
"128265008733465533751740757248124177676",
"62884952843744061373952889160712929151",
"335581262839156328206944817277869107947",
"287891123013447215792626809653646765414",
"256866135003508236599004609660280245443",
"318785817490040408764688641558849446030"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dceb683ab87ca3666a9bb5c0158528b646faedc4",
"deprecated": false,
"id": "CVE-2024-27018-aa0c7c30",
"signature_version": "v1",
"target": {
"file": "net/bridge/netfilter/nf_conntrack_bridge.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 1768.0,
"function_hash": "155382267474501387363161708070997989316"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43193174510ea4f3ce09b796e559a2fd9f148615",
"deprecated": false,
"id": "CVE-2024-27018-aac372a3",
"signature_version": "v1",
"target": {
"function": "br_handle_frame",
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 341.0,
"function_hash": "290113714032545637002555301868287800971"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43193174510ea4f3ce09b796e559a2fd9f148615",
"deprecated": false,
"id": "CVE-2024-27018-b1191b6d",
"signature_version": "v1",
"target": {
"function": "nf_ct_bridge_in",
"file": "net/bridge/netfilter/nf_conntrack_bridge.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"339687551220090829560544200097277564139",
"106212756278280352560778308290147294764",
"187533085561903884172703740895637656880",
"19959632513481237055116820857819961290",
"258878834062900350228889026372783314421",
"142008568023067199651711775849145400576",
"316429862734306823813839485914324102578",
"120414667913553312565950549618746398153"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f59ac29dea0921637053908fe99268d157bbb9d",
"deprecated": false,
"id": "CVE-2024-27018-b2357514",
"signature_version": "v1",
"target": {
"file": "net/bridge/br_netfilter_hooks.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"241761581022130743736309613613784357498",
"125737591456343536647248626444473431874",
"165133418132386624916928007749893362801",
"128265008733465533751740757248124177676",
"62884952843744061373952889160712929151",
"335581262839156328206944817277869107947",
"287891123013447215792626809653646765414",
"256866135003508236599004609660280245443",
"318785817490040408764688641558849446030"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b13db0d16bc7b2a52abcf5cb71334f63faa5dbd6",
"deprecated": false,
"id": "CVE-2024-27018-b4dd2891",
"signature_version": "v1",
"target": {
"file": "net/bridge/netfilter/nf_conntrack_bridge.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"241761581022130743736309613613784357498",
"125737591456343536647248626444473431874",
"165133418132386624916928007749893362801",
"128265008733465533751740757248124177676",
"62884952843744061373952889160712929151",
"335581262839156328206944817277869107947",
"287891123013447215792626809653646765414",
"256866135003508236599004609660280245443",
"318785817490040408764688641558849446030"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f59ac29dea0921637053908fe99268d157bbb9d",
"deprecated": false,
"id": "CVE-2024-27018-ccc0b4d1",
"signature_version": "v1",
"target": {
"file": "net/bridge/netfilter/nf_conntrack_bridge.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"241761581022130743736309613613784357498",
"125737591456343536647248626444473431874",
"165133418132386624916928007749893362801",
"128265008733465533751740757248124177676",
"62884952843744061373952889160712929151",
"335581262839156328206944817277869107947",
"287891123013447215792626809653646765414",
"256866135003508236599004609660280245443",
"318785817490040408764688641558849446030"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43193174510ea4f3ce09b796e559a2fd9f148615",
"deprecated": false,
"id": "CVE-2024-27018-db30882d",
"signature_version": "v1",
"target": {
"file": "net/bridge/netfilter/nf_conntrack_bridge.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 659.0,
"function_hash": "155583925021249352030760536060587046836"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f59ac29dea0921637053908fe99268d157bbb9d",
"deprecated": false,
"id": "CVE-2024-27018-e6580ab1",
"signature_version": "v1",
"target": {
"function": "br_pass_frame_up",
"file": "net/bridge/br_input.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 798.0,
"function_hash": "71171400140023795008917942088621768391"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43193174510ea4f3ce09b796e559a2fd9f148615",
"deprecated": false,
"id": "CVE-2024-27018-ea27766d",
"signature_version": "v1",
"target": {
"function": "br_nf_local_in",
"file": "net/bridge/br_netfilter_hooks.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"339687551220090829560544200097277564139",
"106212756278280352560778308290147294764",
"187533085561903884172703740895637656880",
"19959632513481237055116820857819961290",
"258878834062900350228889026372783314421",
"142008568023067199651711775849145400576",
"316429862734306823813839485914324102578",
"120414667913553312565950549618746398153"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@751de2012eafa4d46d8081056761fa0e9cc8a178",
"deprecated": false,
"id": "CVE-2024-27018-ebc2d20d",
"signature_version": "v1",
"target": {
"file": "net/bridge/br_netfilter_hooks.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 798.0,
"function_hash": "71171400140023795008917942088621768391"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dceb683ab87ca3666a9bb5c0158528b646faedc4",
"deprecated": false,
"id": "CVE-2024-27018-f0e45bce",
"signature_version": "v1",
"target": {
"function": "br_nf_local_in",
"file": "net/bridge/br_netfilter_hooks.c"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"339687551220090829560544200097277564139",
"106212756278280352560778308290147294764",
"187533085561903884172703740895637656880",
"19959632513481237055116820857819961290",
"258878834062900350228889026372783314421",
"142008568023067199651711775849145400576",
"316429862734306823813839485914324102578",
"120414667913553312565950549618746398153"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43193174510ea4f3ce09b796e559a2fd9f148615",
"deprecated": false,
"id": "CVE-2024-27018-f4bb2fb0",
"signature_version": "v1",
"target": {
"file": "net/bridge/br_netfilter_hooks.c"
}
},
{
"signature_type": "Function",
"digest": {
"length": 341.0,
"function_hash": "290113714032545637002555301868287800971"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f59ac29dea0921637053908fe99268d157bbb9d",
"deprecated": false,
"id": "CVE-2024-27018-f54e798e",
"signature_version": "v1",
"target": {
"function": "nf_ct_bridge_in",
"file": "net/bridge/netfilter/nf_conntrack_bridge.c"
}
}
]