CVE-2024-44944

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50

Description The issue is related to the netfilter's ctnetlink, where the delete expectation path is missing a call to the nf expect get id() helper function to calculate the expectation ID. This results in the leakage of the LSB of the expectation object address to userspace. An attacker could potentially exploit this to gain elevated privileges.

Recommendations To resolve the issue, update the Linux kernel to version 6.6.50 or later. As a temporary workaround, consider restricting access to the vulnerable ctnetlink module to minimize the risk of exploitation.