CVE-2024-0607
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Kernel: nf_tables: pointer math issue in nft_byteorder_eval()
A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
kernel
- Vendor
- Unknown
- Product
- Unknown
- Platforms
- Unknown
- Default status
unaffected- Package
- kernel
- Package collection
- https://git.kernel.org/pub/scm/linux/kernel
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | semver | 6.7-rc2 | Unavailable | None listed |
Red Hat Enterprise Linux 6
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 6
- Platforms
- Unknown
- Default status
unaffected- Package
- kernel
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 7
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 7
- Platforms
- Unknown
- Default status
unaffected- Package
- kernel
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 7
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 7
- Platforms
- Unknown
- Default status
unaffected- Package
- kernel-rt
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 8
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 8
- Platforms
- Unknown
- Default status
affected- Package
- kernel
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 8
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 8
- Platforms
- Unknown
- Default status
affected- Package
- kernel-rt
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
affected- Package
- kernel
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
affected- Package
- kernel-rt
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.