In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: clean up hook list when offload flags check fails
splice back the hook list so nft_chain_release_hook() has a chance to release the hooks.
BUG: memory leak unreferenced object 0xffff88810180b100 (size 96): comm "syz-executor133", pid 3619, jiffies 4294945714 (age 12.690s) hex dump (first 32 bytes): 28 64 23 02 81 88 ff ff 28 64 23 02 81 88 ff ff (d#.....(d#..... 90 a8 aa 83 ff ff ff ff 00 00 b5 0f 81 88 ff ff ................ backtrace: [<ffffffff83a8c59b>] kmalloc include/linux/slab.h:600 [inline] [<ffffffff83a8c59b>] nft_netdev_hook_alloc+0x3b/0xc0 net/netfilter/nf_tables_api.c:1901 [<ffffffff83a9239a>] nft_chain_parse_netdev net/netfilter/nf_tables_api.c:1998 [inline] [<ffffffff83a9239a>] nft_chain_parse_hook+0x33a/0x530 net/netfilter/nf_tables_api.c:2073 [<ffffffff83a9b14b>] nf_tables_addchain.constprop.0+0x10b/0x950 net/netfilter/nf_tables_api.c:2218 [<ffffffff83a9c41b>] nf_tables_newchain+0xa8b/0xc60 net/netfilter/nf_tables_api.c:2593 [<ffffffff83a3d6a6>] nfnetlink_rcv_batch+0xa46/0xd20 net/netfilter/nfnetlink.c:517 [<ffffffff83a3db79>] nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:638 [inline] [<ffffffff83a3db79>] nfnetlink_rcv+0x1f9/0x220 net/netfilter/nfnetlink.c:656 [<ffffffff83a13b17>] netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] [<ffffffff83a13b17>] netlink_unicast+0x397/0x4c0 net/netlink/af_netlink.c:1345 [<ffffffff83a13fd6>] netlink_sendmsg+0x396/0x710 net/netlink/af_netlink.c:1921 [<ffffffff83865ab6>] sock_sendmsg_nosec net/socket.c:714 [inline] [<ffffffff83865ab6>] sock_sendmsg+0x56/0x80 net/socket.c:734 [<ffffffff8386601c>] ____sys_sendmsg+0x36c/0x390 net/socket.c:2482 [<ffffffff8386a918>] ___sys_sendmsg+0xa8/0x110 net/socket.c:2536 [<ffffffff8386aaa8>] __sys_sendmsg+0x88/0x100 net/socket.c:2565 [<ffffffff845e5955>] do_syscall_x64 arch/x86/entry/common.c:50 [inline] [<ffffffff845e5955>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 [<ffffffff84800087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-livepatch-5.15.69-37.134Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.144-127.601Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-devel | Aug 28, 2024 | May 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 3, 2024 |
| Suse | — | Upgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade dtb-exynosUpgrade gfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-syms-azureUpgrade dlm-kmp-64kbUpgrade dtb-caviumUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-alteraUpgrade kernel-default-extraUpgrade kernel-rt-vdsoUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade dtb-apmUpgrade dtb-sprdUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade dtb-armUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade kernel-macrosUpgrade dtb-allwinnerUpgrade kernel-debug-vdsoUpgrade dtb-amlogicUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade kernel-azure-livepatch-develUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-renesasUpgrade dtb-amazonUpgrade dtb-appleUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade dtb-freescaleUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdso | Aug 9, 2024 | May 3, 2024 |
| Ubuntu | — | Upgrade linux-lowlatency-hwe-5.15Upgrade linux-azure-fdeUpgrade linux-oracle-5.15Upgrade linux-lowlatencyUpgrade linux-realtimeUpgrade linux-oracleUpgrade linux-hwe-5.15Upgrade linux-nvidiaUpgrade linux-aws-5.15Upgrade linux-azure-5.15Upgrade linux-gkeop-5.15Upgrade linux-gcp-5.15Upgrade linux-azure-fde-5.15Upgrade linux-gkeUpgrade linuxUpgrade linux-raspiUpgrade linux-gkeopUpgrade linux-azureUpgrade linux-intel-iotg-5.15Upgrade linux-gcpUpgrade linux-ibmUpgrade linux-kvmUpgrade linux-intel-iotgUpgrade linux-awsUpgrade linux-riscv-5.15 | Nov 19, 2024 | May 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub