Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2024-27403

HistoryMay 17, 2024 - 12:15 p.m.

CVE-2024-27403

2024-05-1712:15:10

Debian Security Bug Tracker

security-tracker.debian.org

linux kernel

netfilter

vulnerability

cve-2024-27403

route object

flow object

refcount underflow

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: reset dst in route object after setting up flow dst is transferred to the flow object, route object does not own it anymore. Reset dst in route object, otherwise if flow_offload_add() fails, error path releases dst twice, leading to a refcount underflow.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux< 6.1.82-1linux_6.1.82-1_all.deb
Debian11alllinux<= 5.10.209-2linux_5.10.209-2_all.deb
Debian10alllinux<= 4.19.249-2linux_4.19.249-2_all.deb
Debian999alllinux< 6.7.7-1linux_6.7.7-1_all.deb
Debian13alllinux< 6.7.7-1linux_6.7.7-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	< 6.1.82-1	linux_6.1.82-1_all.deb
Debian	11	all	linux	<= 5.10.209-2	linux_5.10.209-2_all.deb
Debian	10	all	linux	<= 4.19.249-2	linux_4.19.249-2_all.deb
Debian	999	all	linux	< 6.7.7-1	linux_6.7.7-1_all.deb
Debian	13	all	linux	< 6.7.7-1	linux_6.7.7-1_all.deb