CVE-2024-0607Medium· 6.6▾ SunlitA flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` i…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 36.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the dst array. On each iteration, 8 bytes are written, but dst is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.
debian_linux = 10.0linux_kernel < 6.6.3fedora = 39enterprise_linux = 8.0enterprise_linux = 9.0Upgrade past the affected range:
linux_kernel 6.6.3Connected by shared product, vendor, weakness, or advisory.
CVE-2024-24858Medium· 4.6A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function
CVE-2024-24857Medium· 4.6A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function
CVE-2024-35809Medium· 4.7In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the .runtime_idle() callback and the .remove() callback in the rtsx_pcr PCI driver …
CVE-2024-26883High· 7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stackmap overflow check on 32-bit arches The stackmap code relies on roundup_pow_of_two() to compute the number of hash buckets, and contains an overflow chec…
CVE-2024-49884High· 7.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-use-after-free in ext4_split_extent_at() We hit the following use-after-free: ================================================================== BUG: K…
CVE-2024-47697High· 7.8In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error Ensure index in rtl2830_pid_filter does not exceed 31 to prevent out-of-bounds access. dev->fi…