CVE WatchOct 16, 2026

CVE-2024-0607

A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates

CVSS

6.6

Medium

EPSS

0.3%

p18

KEV

—

Exploit Today

0-100

Published: Jan 18, 2024 · Last modified: Oct 16, 2026 · CWE-229

EPSS · 30d

0.2%EPSS · 30 days0.3%

2026-10-032026-10-31

Technical description

A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-595668.4 HIG

7.0%

——2A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS.20d CVE-2026-595658.8 HIG

41.2%

——12A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows.20d CVE-2025-35973—

0.9%

——0Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and require no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.33d CVE-2026-456029.1 CRI

30.5%

——9No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network.104d CVE-2025-590327.5 HIG

54.3%

——16ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be used to crash ManageSieve service repeatedly, making it unavailable for other users. Control access to ManageSieve port, or disable the service if it's not needed. Alternatively upgrade to a fixed version. No publicly available exploits are known.26d CVE-2024-204315.8 MED

34.1%

——10A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access control policy. This vulnerability is due to improper assignment of geolocation data. An attacker could exploit this vulnerability by sending traffic through an affected device. A successful exploit could allow the attacker to bypass a geolocation-based access control policy and successfully send traffic to a protected device.82d