In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: clean up hook list when offload flags check fails
splice back the hook list so nft_chain_release_hook() has a chance to release the hooks.
BUG: memory leak unreferenced object 0xffff88810180b100 (size 96): comm "syz-executor133", pid 3619, jiffies 4294945714 (age 12.690s) hex dump (first 32 bytes): 28 64 23 02 81 88 ff ff 28 64 23 02 81 88 ff ff (d#.....(d#..... 90 a8 aa 83 ff ff ff ff 00 00 b5 0f 81 88 ff ff ................ backtrace: [<ffffffff83a8c59b>] kmalloc include/linux/slab.h:600 [inline] [<ffffffff83a8c59b>] nft_netdev_hook_alloc+0x3b/0xc0 net/netfilter/nf_tables_api.c:1901 [<ffffffff83a9239a>] nft_chain_parse_netdev net/netfilter/nf_tables_api.c:1998 [inline] [<ffffffff83a9239a>] nft_chain_parse_hook+0x33a/0x530 net/netfilter/nf_tables_api.c:2073 [<ffffffff83a9b14b>] nf_tables_addchain.constprop.0+0x10b/0x950 net/netfilter/nf_tables_api.c:2218 [<ffffffff83a9c41b>] nf_tables_newchain+0xa8b/0xc60 net/netfilter/nf_tables_api.c:2593 [<ffffffff83a3d6a6>] nfnetlink_rcv_batch+0xa46/0xd20 net/netfilter/nfnetlink.c:517 [<ffffffff83a3db79>] nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:638 [inline] [<ffffffff83a3db79>] nfnetlink_rcv+0x1f9/0x220 net/netfilter/nfnetlink.c:656 [<ffffffff83a13b17>] netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] [<ffffffff83a13b17>] netlink_unicast+0x397/0x4c0 net/netlink/af_netlink.c:1345 [<ffffffff83a13fd6>] netlink_sendmsg+0x396/0x710 net/netlink/af_netlink.c:1921 [<ffffffff83865ab6>] sock_sendmsg_nosec net/socket.c:714 [inline] [<ffffffff83865ab6>] sock_sendmsg+0x56/0x80 net/socket.c:734 [<ffffffff8386601c>] ____sys_sendmsg+0x36c/0x390 net/socket.c:2482 [<ffffffff8386a918>] ___sys_sendmsg+0xa8/0x110 net/socket.c:2536 [<ffffffff8386aaa8>] __sys_sendmsg+0x88/0x100 net/socket.c:2565 [<ffffffff845e5955>] do_syscall_x64 arch/x86/entry/common.c:50 [inline] [<ffffffff845e5955>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 [<ffffffff84800087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-livepatch-5.10.144-127.601Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.69-37.134Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-tools | Aug 28, 2024 | May 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | May 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 3, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade dtb-amazonUpgrade dtb-renesasUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-azureUpgrade dtb-marvellUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-debugUpgrade kernel-rt-vdsoUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade dtb-armUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade dtb-caviumUpgrade kernel-rt-livepatchUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade dtb-apmUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-source-vanillaUpgrade kernel-obs-qaUpgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azure | Aug 9, 2024 | May 3, 2024 |
| Ubuntu | — | Upgrade linux-gkeUpgrade linux-azure-5.15Upgrade linux-azure-fdeUpgrade linux-nvidiaUpgrade linux-realtimeUpgrade linux-oracle-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-hwe-5.15Upgrade linux-lowlatencyUpgrade linux-gcp-5.15Upgrade linux-oracleUpgrade linux-gkeopUpgrade linux-gkeop-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-raspiUpgrade linux-azure-fde-5.15Upgrade linux-aws-5.15Upgrade linux-azureUpgrade linuxUpgrade linux-awsUpgrade linux-riscv-5.15Upgrade linux-ibmUpgrade linux-gcpUpgrade linux-intel-iotgUpgrade linux-kvm | Nov 19, 2024 | May 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub