Riskcovery

CVE-2024-27403

netfilter: nft_flow_offload: reset dst in route object after setting up flow

State
Published
Severity
7.8 High
Published
May 17, 2024
Updated
Aug 5, 2026
Reserved
Feb 25, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_flow_offload: reset dst in route object after setting up flow

dst is transferred to the flow object, route object does not own it anymore. Reset dst in route object, otherwise if flow_offload_add() fails, error path releases dst twice, leading to a refcount underflow.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a3c90f7a2323b331ae816d5b0633e68148e25d04 to before 4c167af9f6b5ae4a5dbc243d5983c295ccc2e43cAffected
  • a3c90f7a2323b331ae816d5b0633e68148e25d04 to before 012df10717da02367aaf92c65f9c89db206c15f4Affected
  • a3c90f7a2323b331ae816d5b0633e68148e25d04 to before 558b00a30e05753a62ecc7e05e939ca8f0241148Affected
  • a3c90f7a2323b331ae816d5b0633e68148e25d04 to before 670548c8db44d76e40e1dfc06812bca36a61e9aeAffected
  • a3c90f7a2323b331ae816d5b0633e68148e25d04 to before 9e0f0430389be7696396c62f037be4bf72cf93e3Affected
LinuxLinux
  • 4.16Affected
  • before 4.16Not affected
  • 5.15.150 through 5.15.*Not affected
  • 6.1.80 through 6.1.*Not affected
  • 6.6.19 through 6.6.*Not affected
  • 6.7.7 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.