CVE-2024-27403

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the netfilter component, specifically the nft flow offload function, where the dst is transferred to the flow object, and the route object does not own it anymore. If the flow offload add() function fails, the error path releases the dst twice, leading to a refcount underflow. This can potentially allow an attacker to execute arbitrary code.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.