VULNERABILITY INTELLIGENCE

CVE-2024-26668

CVSS score5.5 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2024-04-02
Last modified2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit: reject configurations that cause integer overflow Reject bogus configs where internal token counter wraps around. This only occurs with very very large requests, such as 17gbyte/s. Its better to reject this rather than having incorrect ratelimit.