CVE-2024-0607: Kernel: nf_tables: pointer math issue in nft_byteorder_eval()

Vulnerability summary

CVE-2024-0607 is a medium (CVSS 6.6) Improper Handling of Values vulnerability in debian debian_linux. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 17.5% of scored vulnerabilities.

Timeline

1. 18-01-2024
   PublishedVulnerability first disclosed.
2. 20-11-2025
   Last modifiedVulnerability information updated.

Description

A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.

• CWE-229Improper Handling of ValuesThe product does not properly handle when the expected number of values for parameters, fields, or arguments is not provided in input, or if those values are undefined.