PT-2024-8007 · Linux+5 · Linux Kernel+5
Published
2024-08-22
·
Updated
2025-09-29
·
CVE-2024-44983
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.50
Description
The issue is related to the netfilter component of the Linux kernel, specifically with the flowtable and validation of the VLAN header. The vulnerability allows an attacker to impact the confidentiality and availability of protected information. The vulnerability is caused by the use of memory beyond the allocated buffer in the
nf flow offload inet hook() function. Technical details include the nf flow offload inet hook() function and the nf hook entry hookfn inline function.Recommendations
To resolve the issue, update the Linux kernel to version 6.6.50 or later.
As a temporary workaround, consider restricting access to the netfilter component until a patch is available.
Exploit
Fix
Use of Uninitialized Resource
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu