{
  "threat_severity" : "Low",
  "public_date" : "2024-02-27T00:00:00Z",
  "bugzilla" : {
    "description" : "kernel: netfilter: divide error in nft_limit_init",
    "id" : "2266423",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2266423"
  },
  "cvss3" : {
    "cvss3_base_score" : "5.5",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
    "status" : "verified"
  },
  "cwe" : "CWE-369",
  "details" : [ "In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: nft_limit: avoid possible divide error in nft_limit_init\ndiv_u64() divides u64 by u32.\nnft_limit_init() wants to divide u64 by u64, use the appropriate\nmath function (div64_u64)\ndivide error: 0000 [#1] PREEMPT SMP KASAN\nCPU: 1 PID: 8390 Comm: syz-executor188 Not tainted 5.12.0-rc4-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nRIP: 0010:div_u64_rem include/linux/math64.h:28 [inline]\nRIP: 0010:div_u64 include/linux/math64.h:127 [inline]\nRIP: 0010:nft_limit_init+0x2a2/0x5e0 net/netfilter/nft_limit.c:85\nCode: ef 4c 01 eb 41 0f 92 c7 48 89 de e8 38 a5 22 fa 4d 85 ff 0f 85 97 02 00 00 e8 ea 9e 22 fa 4c 0f af f3 45 89 ed 31 d2 4c 89 f0 <49> f7 f5 49 89 c6 e8 d3 9e 22 fa 48 8d 7d 48 48 b8 00 00 00 00 00\nRSP: 0018:ffffc90009447198 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: 0000200000000000 RCX: 0000000000000000\nRDX: 0000000000000000 RSI: ffffffff875152e6 RDI: 0000000000000003\nRBP: ffff888020f80908 R08: 0000200000000000 R09: 0000000000000000\nR10: ffffffff875152d8 R11: 0000000000000000 R12: ffffc90009447270\nR13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000\nFS:  000000000097a300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00000000200001c4 CR3: 0000000026a52000 CR4: 00000000001506e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\nnf_tables_newexpr net/netfilter/nf_tables_api.c:2675 [inline]\nnft_expr_init+0x145/0x2d0 net/netfilter/nf_tables_api.c:2713\nnft_set_elem_expr_alloc+0x27/0x280 net/netfilter/nf_tables_api.c:5160\nnf_tables_newset+0x1997/0x3150 net/netfilter/nf_tables_api.c:4321\nnfnetlink_rcv_batch+0x85a/0x21b0 net/netfilter/nfnetlink.c:456\nnfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:580 [inline]\nnfnetlink_rcv+0x3af/0x420 net/netfilter/nfnetlink.c:598\nnetlink_unicast_kernel net/netlink/af_netlink.c:1312 [inline]\nnetlink_unicast+0x533/0x7d0 net/netlink/af_netlink.c:1338\nnetlink_sendmsg+0x856/0xd90 net/netlink/af_netlink.c:1927\nsock_sendmsg_nosec net/socket.c:654 [inline]\nsock_sendmsg+0xcf/0x120 net/socket.c:674\n____sys_sendmsg+0x6e8/0x810 net/socket.c:2350\n___sys_sendmsg+0xf3/0x170 net/socket.c:2404\n__sys_sendmsg+0xe5/0x1b0 net/socket.c:2433\ndo_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46\nentry_SYSCALL_64_after_hwframe+0x44/0xae", "A denial of service flaw was found in nft_limit_init in netfilter's nft_limit in the Linux Kernel. This issue occurs due to an inappropriate math function selection, which may cause an availability threat." ],
  "affected_release" : [ {
    "product_name" : "Red Hat Enterprise Linux 8.2 Advanced Update Support",
    "release_date" : "2024-04-23T00:00:00Z",
    "advisory" : "RHSA-2024:2006",
    "cpe" : "cpe:/o:redhat:rhel_aus:8.2",
    "package" : "kernel-0:4.18.0-193.133.1.el8_2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.2 Telecommunications Update Service",
    "release_date" : "2024-04-23T00:00:00Z",
    "advisory" : "RHSA-2024:2008",
    "cpe" : "cpe:/a:redhat:rhel_tus:8.2::nfv",
    "package" : "kernel-rt-0:4.18.0-193.133.1.rt13.184.el8_2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.2 Telecommunications Update Service",
    "release_date" : "2024-04-23T00:00:00Z",
    "advisory" : "RHSA-2024:2006",
    "cpe" : "cpe:/o:redhat:rhel_tus:8.2",
    "package" : "kernel-0:4.18.0-193.133.1.el8_2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions",
    "release_date" : "2024-04-23T00:00:00Z",
    "advisory" : "RHSA-2024:2006",
    "cpe" : "cpe:/o:redhat:rhel_e4s:8.2",
    "package" : "kernel-0:4.18.0-193.133.1.el8_2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "release_date" : "2024-04-30T00:00:00Z",
    "advisory" : "RHSA-2024:2582",
    "cpe" : "cpe:/o:redhat:rhel_aus:8.4",
    "package" : "kernel-0:4.18.0-305.130.1.el8_4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
    "release_date" : "2024-04-30T00:00:00Z",
    "advisory" : "RHSA-2024:2585",
    "cpe" : "cpe:/a:redhat:rhel_tus:8.4::nfv",
    "package" : "kernel-rt-0:4.18.0-305.130.1.rt7.206.el8_4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Telecommunications Update Service",
    "release_date" : "2024-04-30T00:00:00Z",
    "advisory" : "RHSA-2024:2582",
    "cpe" : "cpe:/o:redhat:rhel_tus:8.4",
    "package" : "kernel-0:4.18.0-305.130.1.el8_4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions",
    "release_date" : "2024-04-30T00:00:00Z",
    "advisory" : "RHSA-2024:2582",
    "cpe" : "cpe:/o:redhat:rhel_e4s:8.4",
    "package" : "kernel-0:4.18.0-305.130.1.el8_4"
  } ],
  "package_state" : [ {
    "product_name" : "Red Hat Enterprise Linux 6",
    "fix_state" : "Out of support scope",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Out of support scope",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Out of support scope",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Fix deferred",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Fix deferred",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2021-46915\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-46915\nhttps://lore.kernel.org/linux-cve-announce/2024022709-CVE-2021-46915-7ded@gregkh/" ],
  "name" : "CVE-2021-46915",
  "csaw" : false
}