CVE-2024-27011

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.9.0-rc3+ #365

Description The vulnerability is related to a memleak in the netfilter nf tables module. The delete set command does not rely on the transaction object for element removal, which could result in restoring twice the refcount of the mapping when a combination of delete element and delete set commands are used from the abort path. The issue is resolved by checking for inactive elements in the next generation for the delete element command in the abort path and skipping the restoration of state if the next generation bit has been already cleared.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the netfilter nf tables memleak vulnerability. Specifically, update to a version later than 6.9.0-rc3+ #365.