In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftables: Fix a memory leak in nftables_updchain
If nftnetdevregisterhooks() fails, the memory associated with nftstats is not freed, causing a memory leak.
This patch fixes it by moving nftstatsalloc() down after nftnetdevregister_hooks() succeeds.
{ "vanir_signatures": [ { "target": { "file": "net/netfilter/nf_tables_api.c" }, "signature_version": "v1", "id": "CVE-2024-27064-0b50a530", "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7eaf837a4eb5f74561e2486972e7f5184b613f6e", "digest": { "line_hashes": [ "235324130300491804853724265224390183112", "110726594479222066607766636673684094260", "195731343544705244068878440209998502295", "35467438393161895231502420425570807647", "234274038751834599905701249904349381461", "24573297434702682577507580369860768587", "328488037069844068541126997444772238147", "252320342537074910706195844870486829924", "157825415097115042093695447085968835564", "171452368428420876046497904860121373206", "296144264476778558672547284772068409051", "263882098871822001616361037929428431817", "119279298412658533333143416108994076600", "301105378243443483518278671201492093481", "12202343058421985016049351065297766616", "83489142275112006336243619172366137482", "191731109298218418568391002163982439142", "111965602545420155660832931111159340220" ], "threshold": 0.9 }, "deprecated": false }, { "target": { "file": "net/netfilter/nf_tables_api.c", "function": "nf_tables_updchain" }, "signature_version": "v1", "id": "CVE-2024-27064-187d7c4f", "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79846fdcc548d617b0b321addc6a3821d3b75b20", "digest": { "length": 3625.0, "function_hash": "306857040913819387435440693501380763075" }, "deprecated": false }, { "target": { "file": "net/netfilter/nf_tables_api.c" }, "signature_version": "v1", "id": "CVE-2024-27064-69b95bae", "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79846fdcc548d617b0b321addc6a3821d3b75b20", "digest": { "line_hashes": [ "235324130300491804853724265224390183112", "110726594479222066607766636673684094260", "195731343544705244068878440209998502295", "35467438393161895231502420425570807647", "234274038751834599905701249904349381461", "24573297434702682577507580369860768587", "328488037069844068541126997444772238147", "252320342537074910706195844870486829924", "157825415097115042093695447085968835564", "171452368428420876046497904860121373206", "296144264476778558672547284772068409051", "263882098871822001616361037929428431817", "119279298412658533333143416108994076600", "301105378243443483518278671201492093481", "12202343058421985016049351065297766616", "83489142275112006336243619172366137482", "191731109298218418568391002163982439142", "111965602545420155660832931111159340220" ], "threshold": 0.9 }, "deprecated": false }, { "target": { "file": "net/netfilter/nf_tables_api.c" }, "signature_version": "v1", "id": "CVE-2024-27064-7c4dad81", "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4e4623a4f6e133e671f65f9ac493bddaaf63e250", "digest": { "line_hashes": [ "235324130300491804853724265224390183112", "110726594479222066607766636673684094260", "195731343544705244068878440209998502295", "35467438393161895231502420425570807647", "234274038751834599905701249904349381461", "24573297434702682577507580369860768587", "328488037069844068541126997444772238147", "252320342537074910706195844870486829924", "157825415097115042093695447085968835564", "171452368428420876046497904860121373206", "296144264476778558672547284772068409051", "263882098871822001616361037929428431817", "119279298412658533333143416108994076600", "301105378243443483518278671201492093481", "12202343058421985016049351065297766616", "83489142275112006336243619172366137482", "191731109298218418568391002163982439142", "111965602545420155660832931111159340220" ], "threshold": 0.9 }, "deprecated": false }, { "target": { "file": "net/netfilter/nf_tables_api.c", "function": "nf_tables_updchain" }, "signature_version": "v1", "id": "CVE-2024-27064-b46b917b", "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4e4623a4f6e133e671f65f9ac493bddaaf63e250", "digest": { "length": 3625.0, "function_hash": "306857040913819387435440693501380763075" }, "deprecated": false }, { "target": { "file": "net/netfilter/nf_tables_api.c" }, "signature_version": "v1", "id": "CVE-2024-27064-c445cfde", "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e77a6b53a3a547b6dedfc40c37cee4f310701090", "digest": { "line_hashes": [ "235324130300491804853724265224390183112", "110726594479222066607766636673684094260", "195731343544705244068878440209998502295", "35467438393161895231502420425570807647", "234274038751834599905701249904349381461", "24573297434702682577507580369860768587", "328488037069844068541126997444772238147", "252320342537074910706195844870486829924", "157825415097115042093695447085968835564", "171452368428420876046497904860121373206", "296144264476778558672547284772068409051", "263882098871822001616361037929428431817", "119279298412658533333143416108994076600", "301105378243443483518278671201492093481", "12202343058421985016049351065297766616", "83489142275112006336243619172366137482", "191731109298218418568391002163982439142", "111965602545420155660832931111159340220" ], "threshold": 0.9 }, "deprecated": false }, { "target": { "file": "net/netfilter/nf_tables_api.c", "function": "nf_tables_updchain" }, "signature_version": "v1", "id": "CVE-2024-27064-ced23681", "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e77a6b53a3a547b6dedfc40c37cee4f310701090", "digest": { "length": 3625.0, "function_hash": "306857040913819387435440693501380763075" }, "deprecated": false }, { "target": { "file": "net/netfilter/nf_tables_api.c", "function": "nf_tables_updchain" }, "signature_version": "v1", "id": "CVE-2024-27064-fe454fb5", "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7eaf837a4eb5f74561e2486972e7f5184b613f6e", "digest": { "length": 3625.0, "function_hash": "306857040913819387435440693501380763075" }, "deprecated": false } ] }