In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() It seems to me that percpu memory for chain stats started leaking since commit 3bc158f8d0330f0a (“netfilter: nf_tables: map basechain priority to hardware priority”) when nft_chain_offload_priority() returned an error.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | linux | < 6.0.2-1 | linux_6.0.2-1_all.deb |
Debian | 11 | all | linux | < 5.10.148-1 | linux_5.10.148-1_all.deb |
Debian | 999 | all | linux | < 6.0.2-1 | linux_6.0.2-1_all.deb |
Debian | 13 | all | linux | < 6.0.2-1 | linux_6.0.2-1_all.deb |