In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_flow_offload: release dst in case direct xmit path is used

Direct xmit does not use it since it calls dev_queue_xmit() to send
packets, hence it calls dst_release().

kmemleak reports:

unreferenced object 0xffff88814f440900 (size 184):
comm "softirq", pid 0, jiffies 4294951896
hex dump (first 32 bytes):
00 60 5b 04 81 88 ff ff 00 e6 e8 82 ff ff ff ff .`[.............
21 0b 50 82 ff ff ff ff 00 00 00 00 00 00 00 00 !.P.............
backtrace (crc cb2bf5d6):
[<000000003ee17107>] kmem_cache_alloc+0x286/0x340
[<0000000021a5de2c>] dst_alloc+0x43/0xb0
[<00000000f0671159>] rt_dst_alloc+0x2e/0x190
[<00000000fe5092c9>] __mkroute_output+0x244/0x980
[<000000005fb96fb0>] ip_route_output_flow+0xc0/0x160
[<0000000045367433>] nf_ip_route+0xf/0x30
[<0000000085da1d8e>] nf_route+0x2d/0x60
[<00000000d1ecd1cb>] nft_flow_route+0x171/0x6a0 [nft_flow_offload]
[<00000000d9b2fb60>] nft_flow_offload_eval+0x4e8/0x700 [nft_flow_offload]
[<000000009f447dbb>] expr_call_ops_eval+0x53/0x330 [nf_tables]
[<00000000072e1be6>] nft_do_chain+0x17c/0x840 [nf_tables]
[<00000000d0551029>] nft_do_chain_inet+0xa1/0x210 [nf_tables]
[<0000000097c9d5c6>] nf_hook_slow+0x5b/0x160
[<0000000005eccab1>] ip_forward+0x8b6/0x9b0
[<00000000553a269b>] ip_rcv+0x221/0x230
[<00000000412872e5>] __netif_receive_skb_one_core+0xfe/0x110

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00026.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
7c71b831220edeab7ce603d818dc1708d9ea4137 affected < 13b57b5cd591d5b22f9bbf047b2922967de411f3
9c5662e95a8dcc232c3ef4deb21033badcd260f6 affected < a6cafdb49a7bbf4a88367db209703eee6941e023
fa502c86566680ac62bc28ec883a069bf7a2aa5e affected < 9256ab9232e35a16af9c30fa4e522e6d1bd3605a
fa502c86566680ac62bc28ec883a069bf7a2aa5e affected < 2d17cf10179a7de6d8f0128168b84ad0b4a1863f
fa502c86566680ac62bc28ec883a069bf7a2aa5e affected < 8762785f459be1cfe6fcf7285c123aad6a3703f0
Linux Linux affected
Version Status Constraints
6.5 affected —
0 unaffected < 6.5
6.6.19 unaffected ≤ 6.6.*
6.7.7 unaffected ≤ 6.7.*
6.8 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/13b57b5cd591d5b22f9bbf047b2922967de411f3 cve-icon cve-icon
https://git.kernel.org/stable/c/2d17cf10179a7de6d8f0128168b84ad0b4a1863f cve-icon cve-icon
https://git.kernel.org/stable/c/8762785f459be1cfe6fcf7285c123aad6a3703f0 cve-icon cve-icon
https://git.kernel.org/stable/c/9256ab9232e35a16af9c30fa4e522e6d1bd3605a cve-icon cve-icon
https://git.kernel.org/stable/c/a6cafdb49a7bbf4a88367db209703eee6941e023 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024041714-CVE-2024-26834-a73b@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-26834 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-26834 cve-icon
History

Wed, 02 Apr 2025 13:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Wed, 06 Nov 2024 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T08:57:34.639Z

Reserved: 2024-02-19T14:20:24.181Z

Link: CVE-2024-26834

cve-icon Vulnrichment

Updated: 2024-08-02T00:14:13.630Z

cve-icon NVD

Status : Analyzed

Published: 2024-04-17T10:15:09.617

Modified: 2025-04-02T13:18:50.803

Link: CVE-2024-26834

cve-icon Redhat

Severity : Low

Publid Date: 2024-04-17T00:00:00Z

Links: CVE-2024-26834 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses