PT-2026-117070

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft flow offload: drop flowtable reference on init error path nft flow offload init bumps the flowtable use count with nft use inc before calling nf ct netns get. When the latter fails, the error is returned as-is and...

kernel security update

4.18.0-553.134.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Linux kernel nft_flow_offload DoS

The vulnerability of the nftflowoffload component in the Linux operating system’s kernel is related to a memory leak in the flowoffloadfillroute function. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow

A flaw was found in the Linux kernel's Netfilter subsystem. When configuring flow offloading, ownership of a destination route object is transferred without properly clearing its reference in the original route structure. If the flow offload setup subsequently fails, the error-handling path...

kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow

A flaw was found in the Linux kernel's Netfilter subsystem. When configuring flow offloading, ownership of a destination route object is transferred without properly clearing its reference in the original route structure. If the flow offload setup subsequently fails, the error-handling path...

SUSE CVE-2024-27403

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftflowoffload: reset dst in route object after setting up flow dst is transferred to the flow object, route object does not own it anymore. Reset dst in route object, otherwise if flowoffloadadd fails, error path...

UBUNTU-CVE-2024-27403

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftflowoffload: reset dst in route object after setting up flow dst is transferred to the flow object, route object does not own it anymore. Reset dst in route object, otherwise if flowoffloadadd fails, error path...

PT-2024-8251

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the netfilter component, specifically the nft flow offload function, where the dst is transferred to the flow object, and the route object does not own it...

PT-2024-7711 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to a memory leak in the nft flow offload component of the Linux kernel. Specifically, the issue arises when the direct xmit path is used, and the dst relea...