Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2024-56783
CVE-2024-56783:
Linux Kernel vulnerability analysis and mitigation
Overview
CVE-2024-56783 is a vulnerability in the Linux kernel's netfilter component, specifically in the nft_socket functionality. The issue was discovered and reported through the syzkaller automated testing system. The vulnerability affects Linux kernel versions from 6.1.112 up to 6.1.120, 6.6.53 up to 6.6.66, and 6.10.12 up to 6.12.5, as well as version 6.13-rc1 (NVD).
Technical details
The vulnerability relates to an unnecessary WARNONONCE condition in the netfilter's nftsocket component when handling cgroup maximum levels. The cgroup maximum depth is set to INTMAX by default, with an option to restrict this maximum depth to a more reasonable value for performance optimization. The issue stems from an unnecessary warning condition that could be triggered from userspace (Kernel Patch). The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).
Impact
The vulnerability's impact is primarily related to potential system performance degradation, as indicated by the CVSS score which shows high availability impact (A:H) but no confidentiality or integrity impacts. The issue could potentially be triggered from userspace, affecting system stability (NVD).
Mitigation and workarounds
The vulnerability has been fixed by removing the unnecessary WARNONONCE condition in the netfilter code. The fix has been implemented in multiple kernel versions through patches, as evidenced by the commit b7529880cb961d515642ce63f9d7570869bbbdc3 (Kernel Patch). Users should upgrade to the fixed versions: beyond 6.1.120, 6.6.66, or 6.12.5 depending on their kernel branch (NVD).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management