Security tracker / CVE-2024-26668

CVE-2024-26668

netfilter: nft_limit: reject configurations that cause integer overflow

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in d2168e849ebf ("netfilter: nft_limit: add per-byte limiting").
 carnil> Vulnerable versions: 4.3-rc1.

Bugs

Status

Branch	Status
upstream	released (6.8-rc2) [c9d9eb9c53d37cdebbad56b91e40baf42d5a97aa]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.7-upstream-stable	released (6.7.3) [00c2c29aa36d1d1827c51a3720e9f893a22c7c6a]
6.6-upstream-stable	released (6.6.15) [9882495d02ecc490604f747437a40626dc9160d0]
6.1-upstream-stable	released (6.1.76) [bc6e242bb74e2ae616bfd2b250682b738e781c9b]
5.10-upstream-stable	needed
sid	released (6.6.15-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.76-1)
5.10-bullseye-security	needed