CVE-2024-0607

Advisory lineage Upstream: 0 Downstream: 30
Modified
Published: 18 Jan 2024, 15:41
Last modified:20 Nov 2025, 18:09

Vulnerability Summary

Overall Risk (default)
medium
26/100
CVSS Score
6.6 MEDIUM
v3.1 (cve.org)
EPSS Score
0.02% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

18 Jan 2024, 15:41
Published
Vulnerability first disclosed
20 Nov 2025, 18:09
Last Modified
Vulnerability information updated

Description

A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.

CVSS Metrics

  • v3.1•MEDIUM•Score: 6.6CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

EPSS Trends

Current EPSS score: 0.02%• Percentile: 6%

Techniques & Countermeasures

  • CWE-229•Improper Handling of Values

    The product does not properly handle when the expected number of values for parameters, fields, or arguments is not provided in input, or if those values are undefined.

Affected Systems

  • fedoraproject•fedora

    39

  • linux•linux_kernel

    < 6.7 | 6.7:rc1

  • redhat•enterprise_linux

    8.0 | 9.0

References (5)