title: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
description: In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
Remove netdevice from inet/ingress basechain in case NETDEV_UNREGISTER
event is reported, otherwise a stale reference to netdevice remains in
the hook list.
affected:
{
product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 60a3815da702, lessThan: 9489e214ea8f, status: affected, versionType: git
version: 60a3815da702, lessThan: 70f17b48c866, status: affected, versionType: git
version: 60a3815da702, lessThan: af149a46890e, status: affected, versionType: git
version: 60a3815da702, lessThan: e5888acbf1a3, status: affected, versionType: git
version: 60a3815da702, lessThan: 36a0a80f3220, status: affected, versionType: git
version: 60a3815da702, lessThan: 01acb2e8666a, status: affected, versionType: git
}
{
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 5.10, status: affected
version: 0, lessThan: 5.10, status: unaffected, versionType: custom
version: 5.10.210, lessThanOrEqual: 5.10.*, status: unaffected, versionType: custom
version: 5.15.149, lessThanOrEqual: 5.15.*, status: unaffected, versionType: custom
version: 6.1.76, lessThanOrEqual: 6.1.*, status: unaffected, versionType: custom
version: 6.6.15, lessThanOrEqual: 6.6.*, status: unaffected, versionType: custom
version: 6.7.3, lessThanOrEqual: 6.7.*, status: unaffected, versionType: custom
version: 6.8, lessThanOrEqual: *, status: unaffected, versionType: original_commit_for_fix
}
