Riskcovery

CVE-2024-27064

netfilter: nf_tables: Fix a memory leak in nf_tables_updchain

State
Published
Severity
Not scored
Published
May 1, 2024
Updated
May 23, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: Fix a memory leak in nf_tables_updchain

If nft_netdev_register_hooks() fails, the memory associated with nft_stats is not freed, causing a memory leak.

This patch fixes it by moving nft_stats_alloc() down after nft_netdev_register_hooks() succeeds.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b9703ed44ffbfba85c103b9de01886a225e14b38 to before 79846fdcc548d617b0b321addc6a3821d3b75b20Affected
  • b9703ed44ffbfba85c103b9de01886a225e14b38 to before 4e4623a4f6e133e671f65f9ac493bddaaf63e250Affected
  • b9703ed44ffbfba85c103b9de01886a225e14b38 to before e77a6b53a3a547b6dedfc40c37cee4f310701090Affected
  • b9703ed44ffbfba85c103b9de01886a225e14b38 to before 7eaf837a4eb5f74561e2486972e7f5184b613f6eAffected
  • d131ce7a319d3bff68d5a9d5509bb22e4ce33946Affected
  • 6.3.3 to before 6.4Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.6.23 through 6.6.*Not affected
  • 6.7.11 through 6.7.*Not affected
  • 6.8.2 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.