Linux Kernel Netfilter Overflow Vulnerability in Nft_Set_Pipapo Lookup Table Allocation

A vulnerability in the Linux kernel's netfilter component has been addressed. This issue involved the nft_set_pipapo feature, where improper calculations could lead to overflow during lookup table allocation. The vulnerability arose because the maximum value of the field length could be multiplied in a way that exceeded expected limits, particularly when considering certain worst-case scenarios. The resolution ensures that such multiplications are checked for overflow before being used to allocate memory, preventing potential exploitation.

Impact

Exploitation of this vulnerability could lead to memory allocation errors, allowing for possible overflow conditions that could be exploited.