CVE-2024-35897
Assigner: Linux
Published: 2024-05-19T08:34:51.799Z
State: PUBLISHED
descriptions: value: In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: discard table flag update with pending basechain deletion

Hook unregistration is deferred to the commit phase, same occurs with
hook updates triggered by the table dormant flag. When both commands are
combined, this results in deleting a basechain while leaving its hook
still registered in the core.
affected: product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: e10f661adc55
lessThan: 9a3b90904d8a
status: affected
versionType: git
version: d9c4da8cb74e
lessThan: b58d0ac35f6d
status: affected
versionType: git
version: 179d9ba5559a
lessThan: 6cbbe1ba76ee
status: affected
versionType: git
version: 179d9ba5559a
lessThan: 2aeb805a1bcd
status: affected
versionType: git
version: 179d9ba5559a
lessThan: 9627fd0c6ea1
status: affected
versionType: git
version: 179d9ba5559a
lessThan: 7f609f630951
status: affected
versionType: git
version: 179d9ba5559a
lessThan: 1bc83a019bbe
status: affected
versionType: git
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 5.13
status: affected
version: 0
lessThan: 5.13
status: unaffected
versionType: custom
version: 5.4.274
lessThanOrEqual: 5.4.*
status: unaffected
versionType: custom
version: 5.10.215
lessThanOrEqual: 5.10.*
status: unaffected
versionType: custom
version: 5.15.155
lessThanOrEqual: 5.15.*
status: unaffected
versionType: custom
version: 6.1.86
lessThanOrEqual: 6.1.*
status: unaffected
versionType: custom
version: 6.6.26
lessThanOrEqual: 6.6.*
status: unaffected
versionType: custom
version: 6.8.5
lessThanOrEqual: 6.8.*
status: unaffected
versionType: custom
version: 6.9
lessThanOrEqual: *
status: unaffected
versionType: original_commit_for_fix
title: netfilter: nf_tables: discard table flag update with pending basechain deletion
x_generator: engine: bippy-d175d3acf727