CVE-2024-44983

netfilter: flowtable: validate vlan header

State: Published
Severity: Not scored
Published: Sep 4, 2024
Updated: May 11, 2026
Reserved: Aug 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: validate vlan header

Ensure there is sufficient room to access the protocol field of the VLAN header, validate it once before the flowtable lookup.

===================================================== BUG: KMSAN: uninit-value in nf_flow_offload_inet_hook+0x45a/0x5f0 net/netfilter/nf_flow_table_inet.c:32 nf_flow_offload_inet_hook+0x45a/0x5f0 net/netfilter/nf_flow_table_inet.c:32 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xf4/0x400 net/netfilter/core.c:626 nf_hook_ingress include/linux/netfilter_netdev.h:34 [inline] nf_ingress net/core/dev.c:5440 [inline]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4cd91f7c290f64fe430867ddbae10bff34657b6a to before c05155cc455785916164aa5e1b4605a2ae946537Affected 4cd91f7c290f64fe430867ddbae10bff34657b6a to before d9384ae7aec46036d248d1c2c2757e471ab486c3Affected 4cd91f7c290f64fe430867ddbae10bff34657b6a to before 0279c35d242d037abeb73d60d06a6d1bb7f672d9Affected 4cd91f7c290f64fe430867ddbae10bff34657b6a to before 043a18bb6cf16adaa2f8642acfde6e8956a9caaaAffected 4cd91f7c290f64fe430867ddbae10bff34657b6a to before 6ea14ccb60c8ab829349979b22b58a941ec4a3eeAffected
LinuxLinux	5.13Affected before 5.13Not affected 5.15.166 through 5.15.Not affected 6.1.107 through 6.1.Not affected 6.6.48 through 6.6.Not affected 6.10.7 through 6.10.Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

4cd91f7c290f64fe430867ddbae10bff34657b6a to before c05155cc455785916164aa5e1b4605a2ae946537Affected
4cd91f7c290f64fe430867ddbae10bff34657b6a to before d9384ae7aec46036d248d1c2c2757e471ab486c3Affected
4cd91f7c290f64fe430867ddbae10bff34657b6a to before 0279c35d242d037abeb73d60d06a6d1bb7f672d9Affected
4cd91f7c290f64fe430867ddbae10bff34657b6a to before 043a18bb6cf16adaa2f8642acfde6e8956a9caaaAffected
4cd91f7c290f64fe430867ddbae10bff34657b6a to before 6ea14ccb60c8ab829349979b22b58a941ec4a3eeAffected

LinuxLinux

5.13Affected
before 5.13Not affected
5.15.166 through 5.15.*Not affected
6.1.107 through 6.1.*Not affected
6.6.48 through 6.6.*Not affected
6.10.7 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.