Linux Kernel Netfilter Connection Tracking Hashtable Size Limitation Vulnerability

A vulnerability in the Linux kernel's netfilter connection tracking component allowed for an improper maximum size configuration of the connection tracking hashtable. This issue could lead to a warning being triggered in the memory allocation function __kvmalloc_node_noprof() when the hashtable was resized, as the allocation flag __GFP_NOWARN was not set. The vulnerability was present in several different versions of the Linux kernel.

Impact

Exploitation of this vulnerability could cause a warning to be triggered during memory allocation, potentially leading to undesirable behavior in the kernel.