Lucene search

K
redhatcveRedhat.comRH:CVE-2024-26668
HistoryApr 03, 2024 - 12:02 a.m.

CVE-2024-26668

2024-04-0300:02:45
redhat.com
access.redhat.com
4
linux
kernel
netfilter
nft_limit
integer overflow
vulnerability

AI Score

7.2

Confidence

High

EPSS

0

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit: reject configurations that cause integer overflow Reject bogus configs where internal token counter wraps around. This only occurs with very very large requests, such as 17gbyte/s. Its better to reject this rather than having incorrect ratelimit.