In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: clean up hook list when offload flags check fails
splice back the hook list so nft_chain_release_hook() has a chance to release the hooks.
BUG: memory leak unreferenced object 0xffff88810180b100 (size 96): comm "syz-executor133", pid 3619, jiffies 4294945714 (age 12.690s) hex dump (first 32 bytes): 28 64 23 02 81 88 ff ff 28 64 23 02 81 88 ff ff (d#.....(d#..... 90 a8 aa 83 ff ff ff ff 00 00 b5 0f 81 88 ff ff ................ backtrace: [<ffffffff83a8c59b>] kmalloc include/linux/slab.h:600 [inline] [<ffffffff83a8c59b>] nft_netdev_hook_alloc+0x3b/0xc0 net/netfilter/nf_tables_api.c:1901 [<ffffffff83a9239a>] nft_chain_parse_netdev net/netfilter/nf_tables_api.c:1998 [inline] [<ffffffff83a9239a>] nft_chain_parse_hook+0x33a/0x530 net/netfilter/nf_tables_api.c:2073 [<ffffffff83a9b14b>] nf_tables_addchain.constprop.0+0x10b/0x950 net/netfilter/nf_tables_api.c:2218 [<ffffffff83a9c41b>] nf_tables_newchain+0xa8b/0xc60 net/netfilter/nf_tables_api.c:2593 [<ffffffff83a3d6a6>] nfnetlink_rcv_batch+0xa46/0xd20 net/netfilter/nfnetlink.c:517 [<ffffffff83a3db79>] nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:638 [inline] [<ffffffff83a3db79>] nfnetlink_rcv+0x1f9/0x220 net/netfilter/nfnetlink.c:656 [<ffffffff83a13b17>] netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] [<ffffffff83a13b17>] netlink_unicast+0x397/0x4c0 net/netlink/af_netlink.c:1345 [<ffffffff83a13fd6>] netlink_sendmsg+0x396/0x710 net/netlink/af_netlink.c:1921 [<ffffffff83865ab6>] sock_sendmsg_nosec net/socket.c:714 [inline] [<ffffffff83865ab6>] sock_sendmsg+0x56/0x80 net/socket.c:734 [<ffffffff8386601c>] ____sys_sendmsg+0x36c/0x390 net/socket.c:2482 [<ffffffff8386a918>] ___sys_sendmsg+0xa8/0x110 net/socket.c:2536 [<ffffffff8386aaa8>] __sys_sendmsg+0x88/0x100 net/socket.c:2565 [<ffffffff845e5955>] do_syscall_x64 arch/x86/entry/common.c:50 [inline] [<ffffffff845e5955>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 [<ffffffff84800087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernelUpgrade bpftoolUpgrade kernel-develUpgrade kernel-livepatch-5.10.144-127.601Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.69-37.134Upgrade python-perf-debuginfo | Aug 28, 2024 | May 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Oct 8, 2024 | May 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 3, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-rtUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade kernel-kvmsmallUpgrade dtb-armUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade dtb-amlogicUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kernel-rt-extraUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade dtb-apmUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade dtb-caviumUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade dtb-allwinnerUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-freescaleUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade dtb-appleUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-develUpgrade kernel-rt_debugUpgrade kernel-symsUpgrade kernel-default-livepatch-devel | Aug 9, 2024 | May 3, 2024 |
| Ubuntu | — | Upgrade linux-azure-fde-5.15Upgrade linux-realtimeUpgrade linux-gcp-5.15Upgrade linux-gkeUpgrade linux-aws-5.15Upgrade linux-azure-5.15Upgrade linux-azure-fdeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-raspiUpgrade linux-lowlatencyUpgrade linux-azureUpgrade linux-nvidiaUpgrade linux-gkeop-5.15Upgrade linux-gkeopUpgrade linux-oracle-5.15Upgrade linux-oracleUpgrade linuxUpgrade linux-hwe-5.15Upgrade linux-awsUpgrade linux-riscv-5.15Upgrade linux-intel-iotgUpgrade linux-ibmUpgrade linux-kvmUpgrade linux-gcp | Nov 19, 2024 | May 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub