CVE-2024-27064

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-27064
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27064.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-27064
Downstream
BELL (1)
DEBIAN (1)
SUSE (5)
UBUNTU (1)
Related
SUSE (5)
Published
2024-05-01T13:04:05Z
Modified
2026-10-20T10:30:54Z
Summary
netfilter: nf_tables: Fix a memory leak in nf_tables_updchain
Details

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: Fix a memory leak in nf_tables_updchain

If nft_netdev_register_hooks() fails, the memory associated with nft_stats is not freed, causing a memory leak.

This patch fixes it by moving nft_stats_alloc() down after nft_netdev_register_hooks() succeeds.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27064.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b9703ed44ffbfba85c103b9de01886a225e14b38
Fixed
79846fdcc548d617b0b321addc6a3821d3b75b20
Fixed
4e4623a4f6e133e671f65f9ac493bddaaf63e250
Fixed
e77a6b53a3a547b6dedfc40c37cee4f310701090
Fixed
7eaf837a4eb5f74561e2486972e7f5184b613f6e
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.3.3
Fixed
6.4
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d131ce7a319d3bff68d5a9d5509bb22e4ce33946

Affected versions

v6.*
v6.3.10
v6.3.11
v6.3.12
v6.3.13
v6.3.3
v6.3.4
v6.3.5
v6.3.6
v6.3.7
v6.3.8
v6.3.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27064.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.4.0
Fixed
6.6.23
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.7.11
Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.8.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27064.json"