CVE-2024-50251

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-50251
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50251.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-50251
Downstream
Related
Published
2024-11-09T10:14:59Z
Modified
2026-08-12T03:30:42Z
Summary
netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
Details

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_payload: sanitize offset and length before calling skb_checksum()

If access to offset + length is larger than the skbuff length, then skb_checksum() triggers BUG_ON().

skb_checksum() internally subtracts the length parameter while iterating over skbuff, BUG_ON(len) at the end of it checks that the expected length to be included in the checksum calculation is fully consumed.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50251.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df
Fixed
a661ed364ae6ae88c2fafa9ddc27df1af2a73701
Fixed
ac7df3fc80fc82bcc3b1e8f6ebc0d2c435d0c534
Fixed
e3e608cbad376674d19a71ccd0d41804d9393f02
Fixed
b1d2de8a669fa14c499a385e056944d5352b3b40
Fixed
d3217323525f7596427124359e76ea0d8fcc9874
Fixed
0ab3be58b45b996764aba0187b46de19b3e58a72
Fixed
c43e0ea848e7b9bef7a682cbc5608022d6d29d7b
Fixed
d5953d680f7e96208c29ce4139a0e38de87a57fe

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50251.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.5.0
Fixed
4.19.323
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.285
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.229
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.171
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.116
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.60
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.11.7

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50251.json"