CVE-2024-44944: linux kernel — Fix

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missing a call to the nf_expect_get_id() helper function to calculate the expectation ID, otherwise LSB of the expectation object address is leaked to userspace.

Is your site exposed to CVE-2024-44944?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

CWE-401 CWE-401

Affected Products

Vendor	Product	Versions
linux	linux_kernel	5.2 — 5.4.282
linux	linux_kernel	5.5 — 5.10.224
linux	linux_kernel	5.11 — 5.15.165
linux	linux_kernel	5.16 — 6.1.103
linux	linux_kernel	6.2 — 6.6.44
linux	linux_kernel	6.7 — 6.10.3
linux	linux_kernel	All
linux	linux_kernel	All

References

Advisories & Patches

https://git.kernel.org/stable/c/24f407042cf90b0872de667460230d8d50c06c39 https://git.kernel.org/stable/c/27662b46f2adaa52c1665a82af4b21c42c4337fd https://git.kernel.org/stable/c/5e2c24f7b0911b15c29aefce760bcf770542fb61 https://git.kernel.org/stable/c/64c0b8e64be8368617ef08dfc59a3160563a1435 https://git.kernel.org/stable/c/66e7650dbbb8e236e781c670b167edc81e771450 https://git.kernel.org/stable/c/74de442b8e12a207c07953ee068009a7701aff8f https://git.kernel.org/stable/c/782161895eb4ac45cf7cfa8db375bd4766cb8299 https://git.kernel.org/stable/c/eb4ca1a97e08ff5b920664ba292e576257e2d184

Other References

https://www.zerodayinitiative.com/advisories/ZDI-24-1182/ https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html https://cert-portal.siemens.com/productcert/html/ssa-265688.html https://cert-portal.siemens.com/productcert/html/ssa-355557.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-613116.html

Frequently Asked Questions

What is CVE-2024-44944? +

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missing a call to the nf_expect_get_id() helper function to calculate the expectation ID, otherwise LSB of the expectation object address is leaked to userspace. It has a CVSS v3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2024-44944? +

CVE-2024-44944 has a CVSS v3.1 score of 5.5 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2024-44944? +

CVE-2024-44944 affects products from linux, specifically: linux_kernel. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-44944? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-0646

A denial-of-service security issue exists within the 1794-AENTR adapter due to improper memory handling of CIP protocol requests. This vulnerability …

CVE-2026-20746

Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when …

CVE-2026-93926

Missing release of memory after effective lifetime, Missing release of resource after effective lifetime vulnerability in Apache Thrift THeaderTransport. This …

CVE-2026-94652

Missing release of memory after effective lifetime vulnerability in Apache Thrift c++ bindings. This issue affects Apache Thrift: before 0.25.0. …

CVE-2026-102716

An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Session …

CVE-2026-53429

Missing Release of Memory after Effective Lifetime vulnerability in leandrocp mdex and mdex_native allows an attacker who controls a rendered …

CVE-2024-44944