Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-26642

netfilter: nf_tables: disallow anonymous set with timeout flag

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow anonymous set with timeout flag Anonymous sets are never used with timeout from userspace, reject this. Exception to this rule is NFT_SET_EVAL to ensure legacy meters still work.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 761da2935d6e18d178582dbdf315a3a458555505 to < e4988d8415bd0294d6f9f4a1e7095f8b50a97ca9affected
  • 761da2935d6e18d178582dbdf315a3a458555505 to < e9a0d3f376eb356d54ffce36e7cc37514cbfbd6faffected
  • 761da2935d6e18d178582dbdf315a3a458555505 to < fe40ffbca19dc70d7c6b1e3c77b9ccb404c57351affected
  • 761da2935d6e18d178582dbdf315a3a458555505 to < 7cdc1be24cc1bcd56a3e89ac4aef20e31ad09199affected
  • 761da2935d6e18d178582dbdf315a3a458555505 to < 72c1efe3f247a581667b7d368fff3bd9a03cd57aaffected
  • 761da2935d6e18d178582dbdf315a3a458555505 to < c0c2176d1814b92ea4c8e7eb7c9cd94cd99c1b12affected
  • 761da2935d6e18d178582dbdf315a3a458555505 to < 8e07c16695583a66e81f67ce4c46e94dece47ba7affected
  • 761da2935d6e18d178582dbdf315a3a458555505 to < 16603605b667b70da974bea8216c93e7db043bf1affected

Linux Linux

Default version status: affected

  • 4.1affected
  • 0 to < 4.1unaffected
  • 4.19.312 to ≤ 4.19.*unaffected
  • 5.4.274 to ≤ 5.4.*unaffected
  • 5.10.215 to ≤ 5.10.*unaffected
  • 5.15.154 to ≤ 5.15.*unaffected
  • 6.1.84 to ≤ 6.1.*unaffected
  • 6.6.24 to ≤ 6.6.*unaffected
  • 6.7.12 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References