In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: clean up hook list when offload flags check fails
splice back the hook list so nft_chain_release_hook() has a chance to release the hooks.
BUG: memory leak unreferenced object 0xffff88810180b100 (size 96): comm "syz-executor133", pid 3619, jiffies 4294945714 (age 12.690s) hex dump (first 32 bytes): 28 64 23 02 81 88 ff ff 28 64 23 02 81 88 ff ff (d#.....(d#..... 90 a8 aa 83 ff ff ff ff 00 00 b5 0f 81 88 ff ff ................ backtrace: [<ffffffff83a8c59b>] kmalloc include/linux/slab.h:600 [inline] [<ffffffff83a8c59b>] nft_netdev_hook_alloc+0x3b/0xc0 net/netfilter/nf_tables_api.c:1901 [<ffffffff83a9239a>] nft_chain_parse_netdev net/netfilter/nf_tables_api.c:1998 [inline] [<ffffffff83a9239a>] nft_chain_parse_hook+0x33a/0x530 net/netfilter/nf_tables_api.c:2073 [<ffffffff83a9b14b>] nf_tables_addchain.constprop.0+0x10b/0x950 net/netfilter/nf_tables_api.c:2218 [<ffffffff83a9c41b>] nf_tables_newchain+0xa8b/0xc60 net/netfilter/nf_tables_api.c:2593 [<ffffffff83a3d6a6>] nfnetlink_rcv_batch+0xa46/0xd20 net/netfilter/nfnetlink.c:517 [<ffffffff83a3db79>] nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:638 [inline] [<ffffffff83a3db79>] nfnetlink_rcv+0x1f9/0x220 net/netfilter/nfnetlink.c:656 [<ffffffff83a13b17>] netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] [<ffffffff83a13b17>] netlink_unicast+0x397/0x4c0 net/netlink/af_netlink.c:1345 [<ffffffff83a13fd6>] netlink_sendmsg+0x396/0x710 net/netlink/af_netlink.c:1921 [<ffffffff83865ab6>] sock_sendmsg_nosec net/socket.c:714 [inline] [<ffffffff83865ab6>] sock_sendmsg+0x56/0x80 net/socket.c:734 [<ffffffff8386601c>] ____sys_sendmsg+0x36c/0x390 net/socket.c:2482 [<ffffffff8386a918>] ___sys_sendmsg+0xa8/0x110 net/socket.c:2536 [<ffffffff8386aaa8>] __sys_sendmsg+0x88/0x100 net/socket.c:2565 [<ffffffff845e5955>] do_syscall_x64 arch/x86/entry/common.c:50 [inline] [<ffffffff845e5955>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 [<ffffffff84800087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.69-37.134Upgrade perfUpgrade kernel-develUpgrade python-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.144-127.601 | Aug 28, 2024 | May 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | May 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 3, 2024 |
| Suse | — | Upgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-default-optionalUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-rt-develUpgrade dtb-xilinxUpgrade kernel-azureUpgrade kernel-macrosUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-develUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-rockchipUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade dtb-sprdUpgrade kernel-kvmsmallUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade dtb-exynosUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade kernel-syms-rtUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-develUpgrade dtb-lgUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade kernel-docsUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-default | Aug 9, 2024 | May 3, 2024 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-nvidiaUpgrade linux-gkeop-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-raspiUpgrade linux-gkeopUpgrade linux-hwe-5.15Upgrade linux-azure-fdeUpgrade linux-azure-5.15Upgrade linux-azureUpgrade linux-aws-5.15Upgrade linuxUpgrade linux-azure-fde-5.15Upgrade linux-gcp-5.15Upgrade linux-lowlatencyUpgrade linux-gkeUpgrade linux-oracle-5.15Upgrade linux-realtimeUpgrade linux-intel-iotgUpgrade linux-ibmUpgrade linux-riscv-5.15Upgrade linux-gcpUpgrade linux-awsUpgrade linux-kvm | Nov 19, 2024 | May 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub