CVE-2024-27065

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not compare internal table flags on updates Restore skipping transaction if table update does not modify flags...

CVE-2024-27065

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not compare internal table flags on updates Restore skipping transaction if table update does not modify flags...

CVE-2024-27064

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix a memory leak in nftablesupdchain If nftnetdevregisterhooks fails, the memory associated with nftstats is not freed, causing a memory leak. This patch fixes it by moving nftstatsalloc down after...

CVE-2024-27065

CVE-2024-27065 is a Linux kernel issue affecting nf_tables: the verifier could incorrectly compare internal table flags during updates. The public advisories in connected documents reference a fix that “restores skipping transaction if table update does not modify flags,” applied as part of kerne...

CVE-2024-27065

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not compare internal table flags on updates Restore skipping transaction if table update does not modify flags...

CVE-2024-27065 netfilter: nf_tables: do not compare internal table flags on updates

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not compare internal table flags on updates Restore skipping transaction if table update does not modify flags...

CVE-2024-27065 netfilter: nf_tables: do not compare internal table flags on updates

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not compare internal table flags on updates Restore skipping transaction if table update does not modify flags...

CVE-2024-27064

CVE-2024-27064 : Linux kernel nf_tables memory leak when nft_netdev_register_hooks() fails. The fix moves nft_stats_alloc() to after successful registration, preventing leaks of nft_stats if registration aborts. Connected Astra Linux advisory mirrors this description for kernel 5.x series, confir...

CVE-2024-27064 netfilter: nf_tables: Fix a memory leak in nf_tables_updchain

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix a memory leak in nftablesupdchain If nftnetdevregisterhooks fails, the memory associated with nftstats is not freed, causing a memory leak. This patch fixes it by moving nftstatsalloc down after...

CVE-2024-27064

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix a memory leak in nftablesupdchain If nftnetdevregisterhooks fails, the memory associated with nftstats is not freed, causing a memory leak. This patch fixes it by moving nftstatsalloc down after...

CVE-2024-27064 netfilter: nf_tables: Fix a memory leak in nf_tables_updchain

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix a memory leak in nftablesupdchain If nftnetdevregisterhooks fails, the memory associated with nftstats is not freed, causing a memory leak. This patch fixes it by moving nftstatsalloc down after...

CVE-2024-27020

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix potential data-race in nftexprtypeget nftunregisterexpr can concurrent with nftexprtypeget, and there is not any protection when iterate over nftablesexpressions list in nftexprtypeget. Therefore, there i...

CVE-2024-27012

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: restore set elements when delete set fails From abort path, nftmapelemactivate needs to restore refcounters to the original state. Currently, it uses the set-ops-walk to iterate over these set elements. The...

AZL-54581 CVE-2024-27011 affecting package kernel for versions less than 6.6.64.2-9

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix memleak in map from abort path The delete set command does not rely on the transaction object for element removal, therefore, a combination of delete element + delete set from the abort path could result ...

CVE-2024-27011

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix memleak in map from abort path The delete set command does not rely on the transaction object for element removal, therefore, a combination of delete element + delete set from the abort path could result ...

AZL-42195 CVE-2024-27012 affecting package kernel for versions less than 6.6.57.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: restore set elements when delete set fails From abort path, nftmapelemactivate needs to restore refcounters to the original state. Currently, it uses the set-ops-walk to iterate over these set elements. The...

UBUNTU-CVE-2024-27011

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix memleak in map from abort path The delete set command does not rely on the transaction object for element removal, therefore, a combination of delete element + delete set from the abort path could result ...

CVE-2024-27019

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix potential data-race in nftobjtypeget nftunregisterobj can concurrent with nftobjtypeget, and there is not any protection when iterate over nftablesobjects list in nftobjtypeget. Therefore, there is...

CVE-2024-27020

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix potential data-race in nftexprtypeget nftunregisterexpr can concurrent with nftexprtypeget, and there is not any protection when iterate over nftablesexpressions list in nftexprtypeget. Therefore, there i...

CVE-2024-27011

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix memleak in map from abort path The delete set command does not rely on the transaction object for element removal, therefore, a combination of delete element + delete set from the abort path could result ...