Linux kernel nft_flow_offload DoS

🗓️ 08 Nov 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 23 Views

The nft_flow_offload memory leak in flow_offload_fill_route in the Linux kernel can trigger service failure.

Reporter	Title	Published	Views	Family All 18
AstraLinux	Astra Linux – Vulnerability in Linux 6.1	24 Aug 202610:19	–	astralinux
CNNVD	Linux Kernel Security Vulnerabilities	17 Apr 202400:00	–	cnnvd
CVE	CVE-2024-26834	17 Apr 202410:10	–	cve
Cvelist	CVE-2024-26834 netfilter: nft_flow_offload: release dst in case direct xmit path is used	17 Apr 202410:10	–	cvelist
Debian CVE	CVE-2024-26834	17 Apr 202410:10	–	debiancve
NVD	CVE-2024-26834	17 Apr 202410:15	–	nvd
osv_bell	BELL-CVE-2024-26834	18 Apr 202405:58	–	osv_bell
osv_cve	CVE-2024-26834 netfilter: nft_flow_offload: release dst in case direct xmit path is used	17 Apr 202410:10	–	osv_cve
osv_debian	DEBIAN-CVE-2024-26834	17 Apr 202410:15	–	osv_debian
osv_ubuntu	UBUNTU-CVE-2024-26834	17 Apr 202410:15	–	osv_ubuntu

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
git	www.git.kernel.org/linus/8762785f459be1cfe6fcf7285c123aad6a3703f0
git	www.git.kernel.org/stable/c/13b57b5cd591d5b22f9bbf047b2922967de411f3
git	www.git.kernel.org/stable/c/2d17cf10179a7de6d8f0128168b84ad0b4a1863f
git	www.git.kernel.org/stable/c/8762785f459be1cfe6fcf7285c123aad6a3703f0
git	www.git.kernel.org/stable/c/9256ab9232e35a16af9c30fa4e522e6d1bd3605a
git	www.git.kernel.org/stable/c/a6cafdb49a7bbf4a88367db209703eee6941e023
kernel	www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.19
kernel	www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.7.7
lore	www.lore.kernel.org/linux-cve-announce/2024041714-CVE-2024-26834-a73b@gregkh/

21 Mar 2025 00:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 24.6

CVSS 35.5

EPSS0.00603

nft flow offload memory leak flow offload route linux kernel service failure