CVE-2024-50251

netfilter: nft_payload: sanitize offset and length before calling skb_checksum()

State: Published
Severity: Not scored
Published: Nov 9, 2024
Updated: Oct 15, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_payload: sanitize offset and length before calling skb_checksum()

If access to offset + length is larger than the skbuff length, then skb_checksum() triggers BUG_ON().

skb_checksum() internally subtracts the length parameter while iterating over skbuff, BUG_ON(len) at the end of it checks that the expected length to be included in the checksum calculation is fully consumed.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before a661ed364ae6ae88c2fafa9ddc27df1af2a73701Affected 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before ac7df3fc80fc82bcc3b1e8f6ebc0d2c435d0c534Affected 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before e3e608cbad376674d19a71ccd0d41804d9393f02Affected 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before b1d2de8a669fa14c499a385e056944d5352b3b40Affected 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before d3217323525f7596427124359e76ea0d8fcc9874Affected 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before 0ab3be58b45b996764aba0187b46de19b3e58a72Affected 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before c43e0ea848e7b9bef7a682cbc5608022d6d29d7bAffected 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before d5953d680f7e96208c29ce4139a0e38de87a57feAffected
LinuxLinux	4.5Affected before 4.5Not affected 4.19.323 through 4.19.Not affected 5.4.285 through 5.4.Not affected 5.10.229 through 5.10.Not affected 5.15.171 through 5.15.Not affected 6.1.116 through 6.1.Not affected 6.6.60 through 6.6.Not affected 6.11.7 through 6.11.*Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before a661ed364ae6ae88c2fafa9ddc27df1af2a73701Affected
7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before ac7df3fc80fc82bcc3b1e8f6ebc0d2c435d0c534Affected
7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before e3e608cbad376674d19a71ccd0d41804d9393f02Affected
7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before b1d2de8a669fa14c499a385e056944d5352b3b40Affected
7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before d3217323525f7596427124359e76ea0d8fcc9874Affected
7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before 0ab3be58b45b996764aba0187b46de19b3e58a72Affected
7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before c43e0ea848e7b9bef7a682cbc5608022d6d29d7bAffected
7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before d5953d680f7e96208c29ce4139a0e38de87a57feAffected

LinuxLinux

4.5Affected
before 4.5Not affected
4.19.323 through 4.19.*Not affected
5.4.285 through 5.4.*Not affected
5.10.229 through 5.10.*Not affected
5.15.171 through 5.15.*Not affected
6.1.116 through 6.1.*Not affected
6.6.60 through 6.6.*Not affected
6.11.7 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.