Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-27017

netfilter: nft_set_pipapo: walk over current view on netlink dump

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: walk over current view on netlink dump The generation mask can be updated while netlink dump is in progress. The pipapo set backend walk iterator cannot rely on it to infer what view of the datastructure is to be used. Add notation to specify if user wants to read/update the set. Based on patch from Florian Westphal.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2a90da8e0dd50f42e577988f4219f4f4cd3616b7 to < ff89db14c63a827066446460e39226c0688ef786affected
  • 45eb6944d0f55102229115de040ef3a48841434a to < ce9fef54c5ec9912a0c9a47bac3195cc41b14679affected
  • 0d836f917520300a8725a5dbdad4406438d0cead to < 52735a010f37580b3a569a996f878fdd87425650affected
  • 2b84e215f87443c74ac0aa7f76bb172d43a87033 to < f24d8abc2bb8cbf31ec713336e402eafa8f42f60affected
  • 2b84e215f87443c74ac0aa7f76bb172d43a87033 to < 721715655c72640567e8742567520c99801148edaffected
  • 2b84e215f87443c74ac0aa7f76bb172d43a87033 to < 29b359cf6d95fd60730533f7f10464e95bd17c73affected
  • f661383b5f1aaac3fe121b91e04332944bc90193affected
  • 5.10.186 to < 5.10.227affected
  • 5.15.119 to < 5.15.168affected
  • 6.1.36 to < 6.1.112affected
  • 6.3.10 to < 6.4affected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 5.10.227 to ≤ 5.10.*unaffected
  • 5.15.168 to ≤ 5.15.*unaffected
  • 6.1.112 to ≤ 6.1.*unaffected
  • 6.6.53 to ≤ 6.6.*unaffected
  • 6.8.8 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References