---
id: CVE-2024-0607
title: A flaw was found in the Netfilter subsystem in the Linux kernel
summary: >-
  A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is
  in the nft_byteorder_eval() function, where the code iterates through a loop
  and writes to the `dst` array. On each iteration, 8 bytes are written, but
  `dst` i…
severity: medium
cvss: 6.6
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H'
cwe:
  - CWE-229
vendor: debian
product: debian_linux
affected:
  - debian_linux = 10.0
  - linux_kernel < 6.6.3
  - fedora = 39
  - enterprise_linux = 8.0
  - enterprise_linux = 9.0
patched:
  - linux_kernel 6.6.3
published: '2024-01-18'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T15:16:08.413'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-0607'
references:
  - url: 'https://access.redhat.com/security/cve/CVE-2024-0607'
    label: secalert@redhat.com
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2258635'
    label: secalert@redhat.com
  - url: >-
      https://github.com/torvalds/linux/commit/c301f0981fdd3fd1ffac6836b423c4d7a8e0eb63
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/security/cve/CVE-2024-0607'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2258635'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://github.com/torvalds/linux/commit/c301f0981fdd3fd1ffac6836b423c4d7a8e0eb63
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00258
epssPercentile: 0.17375
ingestedAt: '2026-10-27T18:52:09.345Z'
---

## Overview

A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.

## Affected

- `debian_linux = 10.0`
- `linux_kernel < 6.6.3`
- `fedora = 39`
- `enterprise_linux = 8.0`
- `enterprise_linux = 9.0`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.6.3`