#VU99159 Resource management error in Linux kernel - CVE-2024-50038

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the mark_mt() and mark_mt_init() functions in net/netfilter/xt_mark.c, within the sizeof() function in net/netfilter/xt_connmark.c, within the connlimit_mt_destroy() function in net/netfilter/xt_connlimit.c, within the connbytes_mt_check() function in net/netfilter/xt_connbytes.c, within the xt_cluster_mt_destroy() function in net/netfilter/xt_cluster.c, within the sizeof() function in net/netfilter/xt_addrtype.c, within the trace_tg() function in net/netfilter/xt_TRACE.c, within the offsetof() function in net/netfilter/xt_SECMARK.c, within the xt_rateest_tg_destroy() and xt_rateest_tg_init() functions in net/netfilter/xt_RATEEST.c, within the nflog_tg_destroy() function in net/netfilter/xt_NFLOG.c, within the led_tg_destroy() function in net/netfilter/xt_LED.c, within the idletimer_tg_destroy_v1() function in net/netfilter/xt_IDLETIMER.c, within the xt_ct_tg_destroy_v1() and sizeof() functions in net/netfilter/xt_CT.c, within the connsecmark_tg_destroy() function in net/netfilter/xt_CONNSECMARK.c, within the sizeof() function in net/netfilter/xt_CLASSIFY.c, within the checksum_tg_check() function in net/netfilter/xt_CHECKSUM.c. A local user can perform a denial of service (DoS) attack.

Remediation

External links

• https://git.kernel.org/stable/c/85ff9a0f793ca52c527e75cd40a69c948627ebde
• https://git.kernel.org/stable/c/8f482bb7e27b37f1f734bb9a8eeb28b23d59d189
• https://git.kernel.org/stable/c/997f67d813ce0cf5eb3cdb8f124da68141e91b6c
• https://git.kernel.org/stable/c/4cdc55ec6222bb195995cc58f7cb46e4d8907056
• https://git.kernel.org/stable/c/0bfcb7b71e735560077a42847f69597ec7dcc326
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.168
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.113
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.4
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.57