cve/2024/CVE-2024-56783.md
2025-09-29 21:09:30 +02:00

1.3 KiB

CVE-2024-56783

Description

In the Linux kernel, the following vulnerability has been resolved:netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup levelcgroup maximum depth is INT_MAX by default, there is a cgroup toggle torestrict this maximum depth to a more reasonable value not to harmperformance. Remove unnecessary WARN_ON_ONCE which is reachable fromuserspace.

POC

Reference

No PoCs from references.

Github