CVE-2024-56783: netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftsocket: remove WARNONONCE on maximum cgroup level
cgroup maximum depth is INTMAX by default, there is a cgroup toggle to restrict this maximum depth to a more reasonable value not to harm performance. Remove unnecessary WARNONONCE which is reachable from userspace.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftsocket: remove WARNONONCE on maximum cgroup level
The Linux kernel CVE team has assigned CVE-2024-56783 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2025010807-CVE-2024-56783-4ed9@gregkh/T
— Red Hat
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56783?
The severity of CVE-2024-56783 is categorized as moderate.
How do I fix CVE-2024-56783?
To fix CVE-2024-56783, you should update the Linux kernel to a version that includes the patch for this vulnerability.
What systems are affected by CVE-2024-56783?
CVE-2024-56783 affects various versions of the Linux kernel, specifically between versions 6.1.112 to 6.1.120, 6.6.53 to 6.6.66, and 6.10.12 to 6.12.5.
Is CVE-2024-56783 a remote vulnerability?
CVE-2024-56783 is not primarily a remote vulnerability as it relates to the Linux kernel's handling of cgroups.
Can CVE-2024-56783 be exploited in a multi-tenant environment?
Yes, CVE-2024-56783 may pose risks in multi-tenant environments where cgroup configurations are not properly managed.