Security / CVE-2024-44945
Linux kernel nfnetlink extack initialization
The Linux kernel's nfnetlink code failed to initialize extended-acknowledgment data before acknowledging batch begin/end operations. NVD rates the issue High; the kernel.org record identifies the affected file as net/netfilter/nfnetlink.c.
CVSS ratings
Abora Team Priority
Abora priority not assignedAbora OS assessment
Stable channel
Abora release assessment
Edge channel
Abora prerelease assessment
Affected components
- Linux kernel
- net/netfilter/nfnetlink.c
NVD and kernel.org identify the affected upstream versions and stable fix commits. Ubuntu's package status is distribution-specific and does not establish Abora exposure.
Version ranges and Abora release impact
- Upstream Linux versions affected
- NVD lists Linux 6.10.0 through 6.10.6 and 6.11-rc1 through 6.11-rc3 as affected.
- Upstream versions with fixes
- Fixed in Linux 6.10.7 and in the 6.11 release line. Stable branches may carry the fix as a backport.
| Abora release | Release date | Linux kernel | CVE-2024-44945 status | What to do |
|---|---|---|---|---|
| v4.2 Solstice | In development | TBD | Cannot assess The release kernel is not specified. | Confirm the final kernel version, then reassess this CVE. |
| v4.1 Horizon | October 3, 2026 | Linux 7.2.9 | Not affected This kernel is newer than the published upstream affected range. | No update is indicated for this CVE by the listed upstream version range. |
| v4.0 Everest (2026.08.28) | August 29, 2026 | Linux 7.2 | Not affected This kernel is newer than the published upstream affected range. | No update is indicated for this CVE by the listed upstream version range. |
| 2026.07.27 Alpha | July 27, 2026 | Linux 7.x | Not affected This kernel is newer than the published upstream affected range. | No update is indicated for this CVE by the listed upstream version range. |
| v3 Denali (v3.14) | June 2026 | Linux 7.0 / 7.1 | Not affected This kernel is newer than the published upstream affected range. | No update is indicated for this CVE by the listed upstream version range. |
| v2.5.0 / v2 | May / June 2026 | Linux 7.0 | Not affected This kernel is newer than the published upstream affected range. | No update is indicated for this CVE by the listed upstream version range. |
| v1.0.1 / v1 | March 26, 2026 | Linux 6.19 / 7.0 | Not affected This kernel is newer than the published upstream affected range. | No update is indicated for this CVE by the listed upstream version range. |
| v36 (First Beta) | March 17, 2026 | Linux 6.19 | Not affected This kernel is newer than the published upstream affected range. | No update is indicated for this CVE by the listed upstream version range. |
Affected status is based on the upstream kernel version and branch fix. An Abora vendor backport can change package-level exposure; verify the shipped kernel package.