CVE-2024-26673

2024-04-0300:03:04

redhat.com

access.redhat.com

linux kernel

cve-2024-26673

netfilter

nft_ct

sanitize layer

protocol number

custom expectations

nfproto_ipv4

nfproto_ipv6

nfproto_inet

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.1%

JSON

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations - Disallow families other than NFPROTO_{IPV4,IPV6,INET}. - Disallow layer 4 protocol with no ports, since destination port is a mandatory attribute for this object.