Vulnerability identifier: #VU91180

Vulnerability risk: Low

CVSSv3.1: 6.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-26668

CWE-ID: CWE-190

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to integer overflow within the nft_limit_eval() and nft_limit_init() functions in net/netfilter/nft_limit.c. A local user can execute arbitrary code.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel:

---

External links
http://git.kernel.org/stable/c/79d4efd75e7dbecd855a3b8a63e65f7265f466e1
http://git.kernel.org/stable/c/bc6e242bb74e2ae616bfd2b250682b738e781c9b
http://git.kernel.org/stable/c/9882495d02ecc490604f747437a40626dc9160d0
http://git.kernel.org/stable/c/00c2c29aa36d1d1827c51a3720e9f893a22c7c6a
http://git.kernel.org/stable/c/c9d9eb9c53d37cdebbad56b91e40baf42d5a97aa

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.