CVE-2024-45018: netfilter: flowtable: initialise extack before use
In the Linux kernel, the following vulnerability has been resolved:
netfilter: flowtable: initialise extack before use
Fix missing initialisation of extack in flow offload.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45018?
CVE-2024-45018 is classified with a low severity level.
How do I fix CVE-2024-45018?
To fix CVE-2024-45018, upgrade to the latest kernel version as specified in your distribution's advisory.
What versions of the Linux kernel are affected by CVE-2024-45018?
CVE-2024-45018 affects Linux kernel versions from 5.5 to 6.11-rc3.
Can I still use my system if it is vulnerable to CVE-2024-45018?
While you can continue to use your system, it is recommended to apply the patch to mitigate potential risks.
What are the consequences of CVE-2024-45018?
The consequences of CVE-2024-45018 could include issues with flow offload functionality in netfilter.