VULNERABILITY INTELLIGENCE
CVE-2024-26668
CVSS score5.5 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2024-04-02
Last modified2026-06-17
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit: reject configurations that cause integer overflow Reject bogus configs where internal token counter wraps around. This only occurs with very very large requests, such as 17gbyte/s. Its better to reject this rather than having incorrect ratelimit.