Linux Kernel Netfilter Component Cgroup Depth Warning Removal Vulnerability

A vulnerability in the Linux kernel's netfilter component has been addressed. The issue involved an unnecessary warning related to the maximum cgroup depth, which is set to INT_MAX by default. Although there is a cgroup option to limit this depth to a more reasonable value to avoid performance issues, the warning could still be triggered from userspace. This vulnerability has been resolved by removing the redundant warning.

Impact

The removal of the warning allows for a more efficient handling of cgroup depths, potentially improving performance without the risk of unnecessary alerts.