CVE-2024-56783

Summary

CVE-2024-56783 is a vulnerability affecting the Linux kernel's netfilter subsystem. Specifically, it relates to the nft_socket component where the removal of a WARN_ON_ONCE check has been addressed. This check was related to the maximum depth of cgroups, which is set to INT_MAX by default in the Linux kernel. A cgroup toggle exists to limit this depth to prevent performance harm, but the unnecessary WARN_ON_ONCE, reachable from userspace, has been removed in this vulnerability. This could potentially lead to unintended consequences or misconfiguration if the cgroup maximum depth is not carefully managed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.