CVE-2024-27011: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-27011 affects the Linux kernel's netfilter component, specifically the nf_tables subsystem. The vulnerability was discovered in the abort path handling of map operations, where a memory leak could occur. The issue arises when a combination of delete element and delete set commands is executed from the abort path, potentially resulting in restoring twice the refcount of the mapping (Kernel Patch).

The vulnerability stems from the delete set command not relying on the transaction object for element removal. When a delete element operation is followed by a delete set operation in the abort path, it can lead to incorrect refcount restoration. The issue has been assigned a CVSS v3.1 base score of 5.5 (Medium), with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability affects Linux kernel versions from 4.12 up to (excluding) 6.8.8, as well as 6.9-rc1 through 6.9-rc4. If exploited, it could lead to memory leaks in the kernel's netfilter subsystem, potentially affecting system stability and resource management (NVD).

The vulnerability requires local access with low privileges and no user interaction. The attack complexity is low, making it relatively straightforward to exploit for attackers with local system access (NVD).

A fix has been implemented that checks for inactive elements in the next generation for the delete element command in the abort path. The patch skips restoring state if the next generation bit has already been cleared, similar to the activate logic using the set walk iterator. System administrators should update to patched kernel versions when available (Kernel Patch).