CVE-2024-26668
Assigner: Linux
Published: 2024-04-02T06:43:29.690Z
State: PUBLISHED
descriptions: value: In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_limit: reject configurations that cause integer overflow

Reject bogus configs where internal token counter wraps around.
This only occurs with very very large requests, such as 17gbyte/s.

Its better to reject this rather than having incorrect ratelimit.
affected: product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: d2168e849ebf
lessThan: 79d4efd75e7d
status: affected
versionType: git
version: d2168e849ebf
lessThan: bc6e242bb74e
status: affected
versionType: git
version: d2168e849ebf
lessThan: 9882495d02ec
status: affected
versionType: git
version: d2168e849ebf
lessThan: 00c2c29aa36d
status: affected
versionType: git
version: d2168e849ebf
lessThan: c9d9eb9c53d3
status: affected
versionType: git
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 4.3
status: affected
version: 0
lessThan: 4.3
status: unaffected
versionType: custom
version: 5.15.149
lessThanOrEqual: 5.15.*
status: unaffected
versionType: custom
version: 6.1.76
lessThanOrEqual: 6.1.*
status: unaffected
versionType: custom
version: 6.6.15
lessThanOrEqual: 6.6.*
status: unaffected
versionType: custom
version: 6.7.3
lessThanOrEqual: 6.7.*
status: unaffected
versionType: custom
version: 6.8
lessThanOrEqual: *
status: unaffected
versionType: original_commit_for_fix
title: netfilter: nft_limit: reject configurations that cause integer overflow
x_generator: engine: bippy-b4257b672505