CVE-2024-46855

netfilter: nft_socket: fix sk refcount leaks

EPSS 0.2%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

27 set 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_socket: fix sk refcount leaks We must put 'sk' reference before returning.

Produtos afetados

Linux · Linux

Referências

https://git.kernel.org/stable/c/076d281e90aaf4192799ecb9a1ed82321e133ecd https://git.kernel.org/stable/c/1f68e097e20d3c695281a9c6433acc37be47fe11 https://git.kernel.org/stable/c/33c2258bf8cb17fba9e58b111d4c4f4cf43a4896 https://git.kernel.org/stable/c/6572440f78b724c46070841a68254ebc534cde24 https://git.kernel.org/stable/c/83e6fb59040e8964888afcaa5612cc1243736715 https://git.kernel.org/stable/c/8b26ff7af8c32cb4148b3e147c52f9e4c695209c https://git.kernel.org/stable/c/ddc7c423c4a5386bf865474c694b48178efd311a https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html