VYPR
Unrated severityNVD Advisory· Published Apr 2, 2024· Updated May 4, 2025

netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations

CVE-2024-26673

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations

- Disallow families other than NFPROTO_{IPV4,IPV6,INET}. - Disallow layer 4 protocol with no ports, since destination port is a mandatory attribute for this object.

Affected products

159

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

7

News mentions

0

No linked articles in our index yet.