{"id":"CVE-2024-44944","revision":"583ec43892f0466abfcaba93c7fb21f2","records":[{"revision":"583ec43892f0466abfcaba93c7fb21f2","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-44944","aliases":[],"title":"netfilter: ctnetlink: use helper function to calculate expect ID","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ctnetlink: use helper function to calculate expect ID\n\nDelete expectation path is missing a call to the nf_expect_get_id()\nhelper function to calculate the expectation ID, otherwise LSB of the\nexpectation object address is leaked to userspace.","state":0,"publishedAt":"2024-08-30T07:56:41.693+00:00","modifiedAt":"2026-10-15T00:49:23.05+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/netfilter/nf_conntrack_netlink.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"7b115755fb9d3aff0ddcd18a5c4d83381362acce\",\n                            \"lessThan\": \"66e7650dbbb8e236e781c670b167edc81e771450\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"3c79107631db1f7fd32cf3f7368e4672004a3010\",\n                            \"lessThan\": \"64c0b8e64be8368617ef08dfc59a3160563a1435\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"3c79107631db1f7fd32cf3f7368e4672004a3010\",\n                            \"lessThan\": \"eb4ca1a97e08ff5b920664ba292e576257e2d184\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"3c79107631db1f7fd32cf3f7368e4672004a3010\",\n                            \"lessThan\": \"5e2c24f7b0911b15c29aefce760bcf770542fb61\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"3c79107631db1f7fd32cf3f7368e4672004a3010\",\n                            \"lessThan\": \"24f407042cf90b0872de667460230d8d50c06c39\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"3c79107631db1f7fd32cf3f7368e4672004a3010\",\n                            \"lessThan\": \"27662b46f2adaa52c1665a82af4b21c42c4337fd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"3c79107631db1f7fd32cf3f7368e4672004a3010\",\n                            \"lessThan\": \"74de442b8e12a207c07953ee068009a7701aff8f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"3c79107631db1f7fd32cf3f7368e4672004a3010\",\n                            \"lessThan\": \"782161895eb4ac45cf7cfa8db375bd4766cb8299\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"3d8b3d0384f709126beef6b917b7e97c23f18e74\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"36bbd861a402a8c5bd8f0365a5967d34cc492f09\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1922476beeeea46bebbe577215078736dd4231dc\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"f862c13c3c926d3008b2c2bcc746ab813108dfbf\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b0a90cae081d7ee14eaa46524fb70f4e23ae8905\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4.19.44\",\n                            \"lessThan\": \"4.19.320\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"3.16.72\",\n                            \"lessThan\": \"3.17\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.4.191\",\n                            \"lessThan\": \"4.5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.9.190\",\n                            \"lessThan\": \"4.10\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.14.120\",\n                            \"lessThan\": \"4.15\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.0.17\",\n                            \"lessThan\": \"5.1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/netfilter/nf_conntrack_netlink.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.1\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.19.320\",\n                            \"lessThanOrEqual\": \"4.19.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.282\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.224\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.165\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.103\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.44\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.10.3\",\n                            \"lessThanOrEqual\": \"6.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.11\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/66e7650dbbb8e236e781c670b167edc81e771450","https://git.kernel.org/stable/c/64c0b8e64be8368617ef08dfc59a3160563a1435","https://git.kernel.org/stable/c/eb4ca1a97e08ff5b920664ba292e576257e2d184","https://git.kernel.org/stable/c/5e2c24f7b0911b15c29aefce760bcf770542fb61","https://git.kernel.org/stable/c/24f407042cf90b0872de667460230d8d50c06c39","https://git.kernel.org/stable/c/27662b46f2adaa52c1665a82af4b21c42c4337fd","https://git.kernel.org/stable/c/74de442b8e12a207c07953ee068009a7701aff8f","https://git.kernel.org/stable/c/782161895eb4ac45cf7cfa8db375bd4766cb8299","https://www.zerodayinitiative.com/advisories/ZDI-24-1182/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-44944","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-44944","identifiers":["CVE-2024-44944"]},"retained":false,"historicalAffected":[]}],"coverage":[]}