CVE-2024-44944
netfilter: ctnetlink: use helper function to calculate expect ID
MEDIUM
5.5
CVSS Score
Published: August 30, 2024 at 07:56 AM UTC
Updated: October 15, 2026 at 01:18 AM UTC
10 products affected across 2 vendorsLinux KernelSIMATIC S7-1500 CPU 1518-4 Pn /dp MFP FirmwareSiplus S7-1500 CPU 1518-4 Pn /dp MFP Firmware
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
SSVC
No known exploit
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missing a call to the nf_expect_get_id() helper function to calculate the expectation ID, otherwise LSB of the expectation object address is leaked to userspace.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
5.11 ≤ v < 5.15.1655.16 ≤ v < 6.1.1035.2 ≤ v < 5.4.2825.5 ≤ v < 5.10.2246.2 ≤ v < 6.6.446.7 ≤ v < 6.10.31922476beeeea46bebbe577215078736dd4231dc3.16.7236bbd861a402a8c5bd8f0365a5967d34cc492f093c79107631db1f7fd32cf3f7368e4672004a30103d8b3d0384f709126beef6b917b7e97c23f18e744.14.1204.19.3204.19.444.4.1914.9.1905.0.175.17b115755fb9d3aff0ddcd18a5c4d83381362acceb0a90cae081d7ee14eaa46524fb70f4e23ae8905f862c13c3c926d3008b2c2bcc746ab813108dfbf
Vendor states this is fixed in 24f407042cf90b0872de667460230d8d50c06c39 (fixed)
Vendor states this is fixed in 27662b46f2adaa52c1665a82af4b21c42c4337fd (fixed)
Vendor states this is fixed in 5e2c24f7b0911b15c29aefce760bcf770542fb61 (fixed)
Vendor states this is fixed in 64c0b8e64be8368617ef08dfc59a3160563a1435 (fixed)
Vendor states this is fixed in 66e7650dbbb8e236e781c670b167edc81e771450 (fixed)
Vendor states this is fixed in 74de442b8e12a207c07953ee068009a7701aff8f (fixed)
Vendor states this is fixed in 782161895eb4ac45cf7cfa8db375bd4766cb8299 (fixed)
Vendor states this is fixed in eb4ca1a97e08ff5b920664ba292e576257e2d184 (fixed)
Affected range stops below 3.17, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.10, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.15, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 4.19.320 (unaffected)
Affected range stops below 4.5, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 5.1 (unaffected)
Vendor states this is fixed in 5.10.224 (unaffected)
Vendor states this is fixed in 5.15.165 (unaffected)
Vendor states this is fixed in 5.4.282 (unaffected)
Vendor states this is fixed in 6.1.103 (unaffected)
Vendor states this is fixed in 6.10.3 (unaffected)
Vendor states this is fixed in 6.11 (unaffected)
Vendor states this is fixed in 6.6.44 (unaffected)
v < V3.1
Affected range stops below V3.1, so it looks safe — our inference, not a vendor statement
v < V3.1
Affected range stops below V3.1, so it looks safe — our inference, not a vendor statement
v < V3.1
Affected range stops below V3.1, so it looks safe — our inference, not a vendor statement
v < V3.1
Affected range stops below V3.1, so it looks safe — our inference, not a vendor statement
v < V3.1
Affected range stops below V3.1, so it looks safe — our inference, not a vendor statement
V3.1.0 ≤ v < V3.1.53.1.0
Affected range stops below V3.1.5, so it looks safe — our inference, not a vendor statement
V3.1.0 ≤ v < V3.1.53.1.0
Affected range stops below V3.1.5, so it looks safe — our inference, not a vendor statement
All versions
V3.1.0 ≤ v < V3.1.53.1.0
Affected range stops below V3.1.5, so it looks safe — our inference, not a vendor statement
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/24f407042cf90b0872de667460230d8d50c06c39
- https://git.kernel.org/stable/c/27662b46f2adaa52c1665a82af4b21c42c4337fd
- https://git.kernel.org/stable/c/5e2c24f7b0911b15c29aefce760bcf770542fb61
- https://git.kernel.org/stable/c/64c0b8e64be8368617ef08dfc59a3160563a1435
- https://git.kernel.org/stable/c/66e7650dbbb8e236e781c670b167edc81e771450
References (15)
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/24f407042cf90b0872de667460230d8d50c06c39Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/27662b46f2adaa52c1665a82af4b21c42c4337fdPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5e2c24f7b0911b15c29aefce760bcf770542fb61Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/64c0b8e64be8368617ef08dfc59a3160563a1435Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/66e7650dbbb8e236e781c670b167edc81e771450Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/74de442b8e12a207c07953ee068009a7701aff8fPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/782161895eb4ac45cf7cfa8db375bd4766cb8299Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/eb4ca1a97e08ff5b920664ba292e576257e2d184SSVC — Action Prioritization
SSVCNo known exploitNot automatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-401
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card