title: netfilter: nf_tables: disallow anonymous set with timeout flag
description: In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: disallow anonymous set with timeout flag
Anonymous sets are never used with timeout from userspace, reject this.
Exception to this rule is NFT_SET_EVAL to ensure legacy meters still work.
affected:
{
product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 761da2935d6e, lessThan: 72c1efe3f247, status: affected, versionType: git
version: 761da2935d6e, lessThan: c0c2176d1814, status: affected, versionType: git
version: 761da2935d6e, lessThan: 8e07c1669558, status: affected, versionType: git
version: 761da2935d6e, lessThan: 16603605b667, status: affected, versionType: git
}
{
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 4.1, status: affected
version: 0, lessThan: 4.1, status: unaffected, versionType: custom
version: 6.1.84, lessThanOrEqual: 6.1.*, status: unaffected, versionType: custom
version: 6.6.24, lessThanOrEqual: 6.6.*, status: unaffected, versionType: custom
version: 6.7.12, lessThanOrEqual: 6.7.*, status: unaffected, versionType: custom
version: 6.8, lessThanOrEqual: *, status: unaffected, versionType: original_commit_for_fix
}
