Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit: reject configurations that cause integer overflow Reject bogus configs where internal token counter wraps around. This only occurs with very very large requests, such as 17gbyte/s. Its better to reject this rather than having incorrect ratelimit.

INFO

Published Date :

2024-04-02T06:43:29.690Z

Last Modified :

2025-05-04T08:53:32.255Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2024-26668 vulnerability.

Vendors Products
Linux
  • Linux Kernel
Redhat
  • Enterprise Linux
  • Rhel Eus
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-26668.

URL Resource
https://git.kernel.org/stable/c/00c2c29aa36d1d1827c51a3720e9f893a22c7c6a cve-icon cve-icon
https://git.kernel.org/stable/c/79d4efd75e7dbecd855a3b8a63e65f7265f466e1 cve-icon cve-icon
https://git.kernel.org/stable/c/9882495d02ecc490604f747437a40626dc9160d0 cve-icon cve-icon
https://git.kernel.org/stable/c/bc6e242bb74e2ae616bfd2b250682b738e781c9b cve-icon cve-icon
https://git.kernel.org/stable/c/c9d9eb9c53d37cdebbad56b91e40baf42d5a97aa cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024040235-CVE-2024-26668-636e@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-26668 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-26668 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact