Re: nf_conntrack: Infoleak via CTA_ID and CTA_EXPECT_ID

Florian Westphal
2017-06-30T19:37:09Z

Richard Weinberger <richard@nod.at> wrote:
> Hi!
>
> I noticed that nf_conntrack leaks kernel addresses, it uses the memory address
> as identifier used for generating conntrack and expect ids..
> Since these ids are also visible to unprivileged users via network namespaces
> I suggest reverting these commits:

Why not use a hash of the address?