CVE-2024-56783 Details
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level cgroup maximum depth is INT_MAX by default, there is a cgroup toggle to restrict this maximum depth to a more reasonable value not to harm performance. Remove unnecessary WARN_ON_ONCE which is reachable from userspace.
A vulnerability in the Linux kernel's netfilter component has been addressed. The issue involved an unnecessary warning related to the maximum cgroup depth, which is set to INT_MAX by default. Although there is a cgroup option to limit this depth to a more reasonable value to avoid performance issues, the warning could still be triggered from userspace. This vulnerability has been resolved by removing the redundant warning.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 1, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-617 | Reachable Assertion | [email protected] |
| CWE-617 | Reachable Assertion | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.1.112, < 6.1.120 >= 6.6.53, < 6.6.66 >= 6.10.12, < 6.12.5 6.13 rc1 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Nov 3, 2025 | CVE Modified | CVE |
| Oct 1, 2025 | CVE Modified | CISA-ADP |
| Jan 9, 2025 | Initial Analysis | [email protected] |
| Jan 8, 2025 | New CVE Received | kernel.org |