Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level cgroup maximum depth is INT_MAX by default, there is a cgroup toggle to restrict this maximum depth to a more reasonable value not to harm performance. Remove unnecessary WARN_ON_ONCE which is reachable from userspace.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected ace0db36b4a1db07a48517c4f04488d1cd05e5f5 before 7064a6daa4a700a298fe3aee11dea296bfe59fc4; affected f07e28e4c623168f9fa5c00f518bd341d4014aa6 before 2f9bec0a749eb646b384fde0c7b7c24687b2ffae; affected 7f3287db654395f9c5ddd246325ff7889f550286 before e227c042580ab065edc610c9ddc9bea691e6fc4d; affected 7f3287db654395f9c5ddd246325ff7889f550286 before b7529880cb961d515642ce63f9d7570869bbbdc3; affected ecc5368315af8473fe052cb928e53756dbfe4403; affected 6.1.112 before 6.1.120; affected 6.6.53 before 6.6.66; affected 6.10.12 before 6.11 |
| Linux / Linux | affected 6.11; unaffected 0 before 6.11; unaffected 6.1.120 through 6.1.*; unaffected 6.6.66 through 6.6.*; unaffected 6.12.5 through 6.12.*; unaffected 6.13 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/7064a6daa4a700a298fe3aee11dea296bfe59fc4
- https://git.kernel.org/stable/c/2f9bec0a749eb646b384fde0c7b7c24687b2ffae
- https://git.kernel.org/stable/c/e227c042580ab065edc610c9ddc9bea691e6fc4d
- https://git.kernel.org/stable/c/b7529880cb961d515642ce63f9d7570869bbbdc3
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.