CVE-2024-44944

MediumCVSS 5.5/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ctnetlink: use helper function to calculate expect ID

Delete expectation path is missing a call to the nf_expect_get_id() helper function to calculate the expectation ID, otherwise LSB of the expectation object address is leaked to userspace.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 7b115755fb9d3aff0ddcd18a5c4d83381362acce, < 66e7650dbbb8e236e781c670b167edc81e771450; >= 3c79107631db1f7fd32cf3f7368e4672004a3010, < 64c0b8e64be8368617ef08dfc59a3160563a1435; >= 3c79107631db1f7fd32cf3f7368e4672004a3010, < eb4ca1a97e08ff5b920664ba292e576257e2d184; >= 3c79107631db1f7fd32cf3f7368e4672004a3010, < 5e2c24f7b0911b15c29aefce760bcf770542fb61; >= 3c79107631db1f7fd32cf3f7368e4672004a3010, < 24f407042cf90b0872de667460230d8d50c06c39; >= 3c79107631db1f7fd32cf3f7368e4672004a3010, < 27662b46f2adaa52c1665a82af4b21c42c4337fd; >= 3c79107631db1f7fd32cf3f7368e4672004a3010, < 74de442b8e12a207c07953ee068009a7701aff8f; >= 3c79107631db1f7fd32cf3f7368e4672004a3010, < 782161895eb4ac45cf7cfa8db375bd4766cb8299; 3d8b3d0384f709126beef6b917b7e97c23f18e74; 36bbd861a402a8c5bd8f0365a5967d34cc492f09; 1922476beeeea46bebbe577215078736dd4231dc; f862c13c3c926d3008b2c2bcc746ab813108dfbf; b0a90cae081d7ee14eaa46524fb70f4e23ae8905; >= 4.19.44, < 4.19.320; >= 3.16.72, < 3.17; >= 4.4.191, < 4.5; >= 4.9.190, < 4.10; >= 4.14.120, < 4.15; >= 5.0.17, < 5.1
LinuxLinux5.1
SiemensRUGGEDCOM RST2428P< V3.1
SiemensSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family—
SiemensSCALANCE XCM-/XRM-/XCH-/XRH-300 family< V3.1
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystem< V1.1.1
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5

References

Timeline

Published
Aug 30, 2024
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-449457.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink: Initialise extack before use in ACKs Add missingCVE-2024-449465.5In the Linux kernel, the following vulnerability has been resolved: kcm: Serialise kcm_sendmsg() for the same socket. syzkaller reported UCVE-2024-449475.5In the Linux kernel, the following vulnerability has been resolved: fuse: Initialize beyond-EOF page contents before setting uptodate fuseCVE-2024-449485.5In the Linux kernel, the following vulnerability has been resolved: x86/mtrr: Check if fixed MTRRs exist before saving them MTRRs have an CVE-2024-449497.8In the Linux kernel, the following vulnerability has been resolved: parisc: fix a possible DMA corruption ARCH_DMA_MINALIGN was defined asCVE-2024-44958.8A vulnerability was found in Tenda i21 1.0.0.14(4656) and classified as critical. Affected by this issue is the function formWifiMacFilterGeCVE-2024-449505.5In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix invalid FIFO access with special register set WCVE-2024-449517.8In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix TX fifo corruption Sometimes, when a packet is CVE-2024-449535.5In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix deadlock during RTC update There is a deadlock whCVE-2024-449544.7In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Fix racy access to midibuf There can be concurrent accessCVE-2024-449565.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/preempt_fence: enlarge the fence critical section It is really CVE-2024-449575.5In the Linux kernel, the following vulnerability has been resolved: xen: privcmd: Switch from mutex to spinlock for irqfds irqfd_wakeup()
CVE-2024-44944: Medium severity, CVSS 5.5 | Vulnix