Back to CVE records
Medium 5.5Published Sep 11, 2024
CVE-2024-45018netfilter: flowtable: initialise extack before use
Updated under an hour ago ()
Does this affect you?
It affects Linux and 2 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: initialise extack before use Fix missing initialisation of extack in flow offload.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from c29f74e0df7a02b8303bcdce93a7c0132d62577a before e5ceff2196dc633c995afb080f6f44a72cff6e1d; from c29f74e0df7a02b8303bcdce93a7c0132d62577a before 356beb911b63a8cff34cb57f755c2a2d2ee9dec7; from c29f74e0df7a02b8303bcdce93a7c0132d62577a before 7eafeec6be68ebd6140a830ce9ae68ad5b67ec78; from c29f74e0df7a02b8303bcdce93a7c0132d62577a before c7b760499f7791352b49b11667ed04b23d7f5b0f; from c29f74e0df7a02b8303bcdce93a7c0132d62577a before 119be227bc04f5035efa64cb823b8a5ca5e2d1c1; from c29f74e0df7a02b8303bcdce93a7c0132d62577a before e9767137308daf906496613fd879808a07f006a2 | CNA record |
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name) | before V1.1.1 | CISA ADP |
linux linux_kernel linux:linux_kernel | from 5.5 before 5.10.225; from 5.11 before 5.15.166; from 5.16 before 6.1.107; from 6.2 before 6.6.48; from 6.7 before 6.10.7; 6.11; 6.11; 6.11 | NVD |
References
- https://git.kernel.org/stable/c/e5ceff2196dc633c995afb080f6f44a72cff6e1dpatch
- https://git.kernel.org/stable/c/356beb911b63a8cff34cb57f755c2a2d2ee9dec7patch
- https://git.kernel.org/stable/c/7eafeec6be68ebd6140a830ce9ae68ad5b67ec78patch
- https://git.kernel.org/stable/c/c7b760499f7791352b49b11667ed04b23d7f5b0fpatch
- https://git.kernel.org/stable/c/119be227bc04f5035efa64cb823b8a5ca5e2d1c1patch
- https://git.kernel.org/stable/c/e9767137308daf906496613fd879808a07f006a2patch
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.