Vulnerabilities CVE-2024-27403

CVE-2024-27403

High

Open

TLP:CLEAR

netfilter: nft_flow_offload: reset dst in route object after setting up flow

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: reset dst in route object after setting up flow dst is transferred to the flow object, route object does not own it anymore. Reset dst in route object, otherwise if flow_offload_add() fails, error path releases dst twice, leading to a refcount underflow.

Details

CVSS Score: 7.8
EPSS Score ⓘ: 0.24%

14.8th percentile
CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Confidence: 90%
Published: May 17, 2024
Last Modified: Aug 5, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.