CVE-2024-0607

    Dashboard / Vulnerabilities / CVE-2024-0607

    CVE-2024-0607

    Published: 18 Jan 2024Last Modified: 12 Aug 2026

    Summary: Kernel: nf_tables: pointer math issue in nft_byteorder_eval()

    Details: A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.

    References: https://access.redhat.com/downloads/content/package-browser/, https://git.kernel.org/pub/scm/linux/kernel, https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html, https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html, https://access.redhat.com/security/cve/CVE-2024-0607, https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/0xxx/CVE-2024-0607.json, https://nvd.nist.gov/vuln/detail/CVE-2024-0607, https://bugzilla.redhat.com/show_bug.cgi?id=2258635, https://github.com/torvalds/linux/commit/c301f0981fdd3fd1ffac6836b423c4d7a8e0eb63

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -98b1cc82c4affc16f5598d4fa14b1858671b2263

    Affected versions

    v6.7-rc1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2024-0607 | CVE-DB