Back to CVE records
Medium 5.5Published Aug 30, 2024
CVE-2024-44944netfilter: ctnetlink: use helper function to calculate expect ID
Updated under an hour ago ()
Does this affect you?
It affects Linux and 8 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missing a call to the nf_expect_get_id() helper function to calculate the expectation ID, otherwise LSB of the expectation object address is leaked to userspace.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from 7b115755fb9d3aff0ddcd18a5c4d83381362acce before 66e7650dbbb8e236e781c670b167edc81e771450; from 3c79107631db1f7fd32cf3f7368e4672004a3010 before 64c0b8e64be8368617ef08dfc59a3160563a1435; from 3c79107631db1f7fd32cf3f7368e4672004a3010 before eb4ca1a97e08ff5b920664ba292e576257e2d184; from 3c79107631db1f7fd32cf3f7368e4672004a3010 before 5e2c24f7b0911b15c29aefce760bcf770542fb61; from 3c79107631db1f7fd32cf3f7368e4672004a3010 before 24f407042cf90b0872de667460230d8d50c06c39; from 3c79107631db1f7fd32cf3f7368e4672004a3010 before 27662b46f2adaa52c1665a82af4b21c42c4337fd; from 3c79107631db1f7fd32cf3f7368e4672004a3010 before 74de442b8e12a207c07953ee068009a7701aff8f; from 3c79107631db1f7fd32cf3f7368e4672004a3010 before 782161895eb4ac45cf7cfa8db375bd4766cb8299; and 11 more ranges | CNA record |
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name) | before V3.1 | CISA ADP |
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name) | all versions not affected | CISA ADP |
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name) | before V3.1 | CISA ADP |
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name) | before V1.1.1 | CISA ADP |
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
linux linux_kernel linux:linux_kernel | from 5.2 before 5.4.282; from 5.5 before 5.10.224; from 5.11 before 5.15.165; from 5.16 before 6.1.103; from 6.2 before 6.6.44; from 6.7 before 6.10.3; 4.19.320; 5.1 | NVD |
References
- https://git.kernel.org/stable/c/66e7650dbbb8e236e781c670b167edc81e771450patch
- https://git.kernel.org/stable/c/64c0b8e64be8368617ef08dfc59a3160563a1435patch
- https://git.kernel.org/stable/c/eb4ca1a97e08ff5b920664ba292e576257e2d184patch
- https://git.kernel.org/stable/c/5e2c24f7b0911b15c29aefce760bcf770542fb61patch
- https://git.kernel.org/stable/c/24f407042cf90b0872de667460230d8d50c06c39patch
- https://git.kernel.org/stable/c/27662b46f2adaa52c1665a82af4b21c42c4337fdpatch
- https://git.kernel.org/stable/c/74de442b8e12a207c07953ee068009a7701aff8fpatch
- https://git.kernel.org/stable/c/782161895eb4ac45cf7cfa8db375bd4766cb8299patch
- https://www.zerodayinitiative.com/advisories/ZDI-24-1182/
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-355557.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.