CVE-2024-26673

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations

- Disallow families other than NFPROTO_{IPV4,IPV6,INET}. - Disallow layer 4 protocol with no ports, since destination port is a mandatory attribute for this object.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 857b46027d6f91150797295752581b7155b9d0e1, < f549f340c91f08b938d60266e792ff7748dae483; >= 857b46027d6f91150797295752581b7155b9d0e1, < 65ee90efc928410c6f73b3d2e0afdd762652c09d; >= 857b46027d6f91150797295752581b7155b9d0e1, < b775ced05489f4b77a35fe203e9aeb22f428e38f; >= 857b46027d6f91150797295752581b7155b9d0e1, < 0f501dae16b7099e69ee9b0d5c70b8f40fd30e98; >= 857b46027d6f91150797295752581b7155b9d0e1, < cfe3550ea5df292c9e2d608e8c4560032391847e; >= 857b46027d6f91150797295752581b7155b9d0e1, < 38cc1605338d99205a263707f4dde76408d3e0e8; >= 857b46027d6f91150797295752581b7155b9d0e1, < 8059918a1377f2f1fff06af4f5a4ed3d5acd6bc4
LinuxLinux5.3

References

Timeline

Published
Apr 2, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-266747.1In the Linux kernel, the following vulnerability has been resolved: x86/lib: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups DurinCVE-2024-266755.5In the Linux kernel, the following vulnerability has been resolved: ppp_async: limit MRU to 64K syzbot triggered a warning [1] in __alloc_CVE-2024-266765.5In the Linux kernel, the following vulnerability has been resolved: af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC. syzbot reCVE-2024-266775.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix delayed ACKs to not set the reference serial number Fix theCVE-2024-266785.5In the Linux kernel, the following vulnerability has been resolved: x86/efistub: Use 1:1 file:memory mapping for PE/COFF .compat section TCVE-2024-266795.5In the Linux kernel, the following vulnerability has been resolved: inet: read sk->sk_family once in inet_recv_error() inet_recv_error() iCVE-2024-26686.5A vulnerability has been found in Campcodes Online Job Finder System 1.0 and classified as critical. This vulnerability affects unknown codeCVE-2024-266805.5In the Linux kernel, the following vulnerability has been resolved: net: atlantic: Fix DMA mapping for PTP hwts ring Function aq_ring_hwtsCVE-2024-266815.5In the Linux kernel, the following vulnerability has been resolved: netdevsim: avoid potential loop in nsim_dev_trap_report_work() Many syCVE-2024-266825.5In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: improve CSA/ECSA connection refusal As mentioned in thCVE-2024-266835.5In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: detect stuck ECSA element in probe resp We recently adCVE-2024-266845.5In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
CVE-2024-26673: High severity, CVSS 7.1 | Vulnix