Riskcovery

CVE-2024-44944

netfilter: ctnetlink: use helper function to calculate expect ID

State
Published
Severity
Not scored
Published
Aug 30, 2024
Updated
Oct 15, 2026
Reserved
Aug 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ctnetlink: use helper function to calculate expect ID

Delete expectation path is missing a call to the nf_expect_get_id() helper function to calculate the expectation ID, otherwise LSB of the expectation object address is leaked to userspace.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7b115755fb9d3aff0ddcd18a5c4d83381362acce to before 66e7650dbbb8e236e781c670b167edc81e771450Affected
  • 3c79107631db1f7fd32cf3f7368e4672004a3010 to before 64c0b8e64be8368617ef08dfc59a3160563a1435Affected
  • 3c79107631db1f7fd32cf3f7368e4672004a3010 to before eb4ca1a97e08ff5b920664ba292e576257e2d184Affected
  • 3c79107631db1f7fd32cf3f7368e4672004a3010 to before 5e2c24f7b0911b15c29aefce760bcf770542fb61Affected
  • 3c79107631db1f7fd32cf3f7368e4672004a3010 to before 24f407042cf90b0872de667460230d8d50c06c39Affected
  • 3c79107631db1f7fd32cf3f7368e4672004a3010 to before 27662b46f2adaa52c1665a82af4b21c42c4337fdAffected
  • 3c79107631db1f7fd32cf3f7368e4672004a3010 to before 74de442b8e12a207c07953ee068009a7701aff8fAffected
  • 3c79107631db1f7fd32cf3f7368e4672004a3010 to before 782161895eb4ac45cf7cfa8db375bd4766cb8299Affected
  • 3d8b3d0384f709126beef6b917b7e97c23f18e74Affected
  • 36bbd861a402a8c5bd8f0365a5967d34cc492f09Affected
  • 1922476beeeea46bebbe577215078736dd4231dcAffected
  • f862c13c3c926d3008b2c2bcc746ab813108dfbfAffected
  • b0a90cae081d7ee14eaa46524fb70f4e23ae8905Affected
  • 4.19.44 to before 4.19.320Affected
  • 3.16.72 to before 3.17Affected
  • 4.4.191 to before 4.5Affected
  • 4.9.190 to before 4.10Affected
  • 4.14.120 to before 4.15Affected
  • 5.0.17 to before 5.1Affected
LinuxLinux
  • 5.1Affected
  • before 5.1Not affected
  • 4.19.320 through 4.19.*Not affected
  • 5.4.282 through 5.4.*Not affected
  • 5.10.224 through 5.10.*Not affected
  • 5.15.165 through 5.15.*Not affected
  • 6.1.103 through 6.1.*Not affected
  • 6.6.44 through 6.6.*Not affected
  • 6.10.3 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.