In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftables: Fix a memory leak in nftables_updchain
If nftnetdevregisterhooks() fails, the memory associated with nftstats is not freed, causing a memory leak.
This patch fixes it by moving nftstatsalloc() down after nftnetdevregister_hooks() succeeds.
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"235324130300491804853724265224390183112",
"110726594479222066607766636673684094260",
"195731343544705244068878440209998502295",
"35467438393161895231502420425570807647",
"234274038751834599905701249904349381461",
"24573297434702682577507580369860768587",
"328488037069844068541126997444772238147",
"252320342537074910706195844870486829924",
"157825415097115042093695447085968835564",
"171452368428420876046497904860121373206",
"296144264476778558672547284772068409051",
"263882098871822001616361037929428431817",
"119279298412658533333143416108994076600",
"301105378243443483518278671201492093481",
"12202343058421985016049351065297766616",
"83489142275112006336243619172366137482",
"191731109298218418568391002163982439142",
"111965602545420155660832931111159340220"
]
},
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7eaf837a4eb5f74561e2486972e7f5184b613f6e",
"signature_version": "v1",
"id": "CVE-2024-27064-0b50a530",
"deprecated": false
},
{
"digest": {
"function_hash": "306857040913819387435440693501380763075",
"length": 3625.0
},
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "nf_tables_updchain"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79846fdcc548d617b0b321addc6a3821d3b75b20",
"signature_version": "v1",
"id": "CVE-2024-27064-187d7c4f",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"235324130300491804853724265224390183112",
"110726594479222066607766636673684094260",
"195731343544705244068878440209998502295",
"35467438393161895231502420425570807647",
"234274038751834599905701249904349381461",
"24573297434702682577507580369860768587",
"328488037069844068541126997444772238147",
"252320342537074910706195844870486829924",
"157825415097115042093695447085968835564",
"171452368428420876046497904860121373206",
"296144264476778558672547284772068409051",
"263882098871822001616361037929428431817",
"119279298412658533333143416108994076600",
"301105378243443483518278671201492093481",
"12202343058421985016049351065297766616",
"83489142275112006336243619172366137482",
"191731109298218418568391002163982439142",
"111965602545420155660832931111159340220"
]
},
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79846fdcc548d617b0b321addc6a3821d3b75b20",
"signature_version": "v1",
"id": "CVE-2024-27064-69b95bae",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"235324130300491804853724265224390183112",
"110726594479222066607766636673684094260",
"195731343544705244068878440209998502295",
"35467438393161895231502420425570807647",
"234274038751834599905701249904349381461",
"24573297434702682577507580369860768587",
"328488037069844068541126997444772238147",
"252320342537074910706195844870486829924",
"157825415097115042093695447085968835564",
"171452368428420876046497904860121373206",
"296144264476778558672547284772068409051",
"263882098871822001616361037929428431817",
"119279298412658533333143416108994076600",
"301105378243443483518278671201492093481",
"12202343058421985016049351065297766616",
"83489142275112006336243619172366137482",
"191731109298218418568391002163982439142",
"111965602545420155660832931111159340220"
]
},
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4e4623a4f6e133e671f65f9ac493bddaaf63e250",
"signature_version": "v1",
"id": "CVE-2024-27064-7c4dad81",
"deprecated": false
},
{
"digest": {
"function_hash": "306857040913819387435440693501380763075",
"length": 3625.0
},
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "nf_tables_updchain"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4e4623a4f6e133e671f65f9ac493bddaaf63e250",
"signature_version": "v1",
"id": "CVE-2024-27064-b46b917b",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"235324130300491804853724265224390183112",
"110726594479222066607766636673684094260",
"195731343544705244068878440209998502295",
"35467438393161895231502420425570807647",
"234274038751834599905701249904349381461",
"24573297434702682577507580369860768587",
"328488037069844068541126997444772238147",
"252320342537074910706195844870486829924",
"157825415097115042093695447085968835564",
"171452368428420876046497904860121373206",
"296144264476778558672547284772068409051",
"263882098871822001616361037929428431817",
"119279298412658533333143416108994076600",
"301105378243443483518278671201492093481",
"12202343058421985016049351065297766616",
"83489142275112006336243619172366137482",
"191731109298218418568391002163982439142",
"111965602545420155660832931111159340220"
]
},
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e77a6b53a3a547b6dedfc40c37cee4f310701090",
"signature_version": "v1",
"id": "CVE-2024-27064-c445cfde",
"deprecated": false
},
{
"digest": {
"function_hash": "306857040913819387435440693501380763075",
"length": 3625.0
},
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "nf_tables_updchain"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e77a6b53a3a547b6dedfc40c37cee4f310701090",
"signature_version": "v1",
"id": "CVE-2024-27064-ced23681",
"deprecated": false
},
{
"digest": {
"function_hash": "306857040913819387435440693501380763075",
"length": 3625.0
},
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "nf_tables_updchain"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7eaf837a4eb5f74561e2486972e7f5184b613f6e",
"signature_version": "v1",
"id": "CVE-2024-27064-fe454fb5",
"deprecated": false
}
]