Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level cgroup maximum depth is INT_MAX by default, there is a cgroup toggle to restrict this maximum depth to a more reasonable value not to harm performance. Remove unnecessary WARN_ON_ONCE which is reachable from userspace.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ace0db36b4a1db07a48517c4f04488d1cd05e5f5 to < 7064a6daa4a700a298fe3aee11dea296bfe59fc4affectedf07e28e4c623168f9fa5c00f518bd341d4014aa6 to < 2f9bec0a749eb646b384fde0c7b7c24687b2ffaeaffected7f3287db654395f9c5ddd246325ff7889f550286 to < e227c042580ab065edc610c9ddc9bea691e6fc4daffected7f3287db654395f9c5ddd246325ff7889f550286 to < b7529880cb961d515642ce63f9d7570869bbbdc3affectedecc5368315af8473fe052cb928e53756dbfe4403affected6.1.112 to < 6.1.120affected6.6.53 to < 6.6.66affected6.10.12 to < 6.11affected
Linux Linux
Default version status: affected
6.11affected0 to < 6.11unaffected6.1.120 to ≤ 6.1.*unaffected6.6.66 to ≤ 6.6.*unaffected6.12.5 to ≤ 6.12.*unaffected6.13 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/7064a6daa4a700a298fe3aee11dea296bfe59fc4 ↗
- https://git.kernel.org/stable/c/2f9bec0a749eb646b384fde0c7b7c24687b2ffae ↗
- https://git.kernel.org/stable/c/e227c042580ab065edc610c9ddc9bea691e6fc4d ↗
- https://git.kernel.org/stable/c/b7529880cb961d515642ce63f9d7570869bbbdc3 ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html ↗