CVE-2024-27064: netfilter: nf_tables: Fix a memory leak in nf_tables_updchain
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftables: Fix a memory leak in nftablesupdchain
If nftnetdevregisterhooks() fails, the memory associated with nftstats is not freed, causing a memory leak.
This patch fixes it by moving nftstatsalloc() down after nftnetdevregisterhooks() succeeds.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27064?
The severity of CVE-2024-27064 is considered medium due to the potential for a memory leak affecting system performance.
Which versions of the Linux kernel are affected by CVE-2024-27064?
CVE-2024-27064 affects the Linux kernel versions from 6.3.3 up to, but not including 6.6.23, 6.7 up to 6.7.11, and 6.8 up to 6.8.2.
How do I fix CVE-2024-27064?
To fix CVE-2024-27064, you should upgrade your Linux kernel to a patched version available after the vulnerability disclosure.
What type of vulnerability is CVE-2024-27064?
CVE-2024-27064 is a memory leak vulnerability in the netfilter component of the Linux kernel.
What impact does CVE-2024-27064 have on system stability?
CVE-2024-27064 can lead to increased memory consumption over time, potentially degrading system stability and performance.