CVE-2024-27415

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: confirm multicast packets before passing them up the stack conntrack nfconfirm logic cannot handle cloned skbs referencing the same nfconn entry, which will happen for multicast broadcast frames on bridges...

CVE-2024-27415

CVE-2024-27415 affects Linux kernel netfilter/bridge. Root cause: nf_confirm and conntrack race when multicast/broadcast frames clone, causing a shared nf_conn entry to be referenced twice before confirmation. Result: a multicast flow can lead to a clone skb’s nfct being unconfirmed and race agai...