CVE-2024-56783

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level

cgroup maximum depth is INT_MAX by default, there is a cgroup toggle to restrict this maximum depth to a more reasonable value not to harm performance. Remove unnecessary WARN_ON_ONCE which is reachable from userspace.

This vulnerability is rated as Moderate severity because triggering the reachable assertion warning requires local access and netfilter socket evaluation, with potential impact limited to a denial of service if the kernel is configured to panic on warnings. On default Red Hat Enterprise Linux systems, the panic-on-warning setting is disabled, meaning that triggering this condition generates a logged kernel warning rather than a system crash unless custom panic settings are active. The flaw does not allow unauthenticated remote access, privilege escalation, or data compromise.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.