CVE-2024-26808

Summary

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain

Remove netdevice from inet/ingress basechain in case NETDEV_UNREGISTER event is reported, otherwise a stale reference to netdevice remains in the hook list.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux60a3815da702fd9e4759945f26cce5c47d3967ad < 9489e214ea8f2a90345516016aa51f2db3a8cc2faffected
LinuxLinux60a3815da702fd9e4759945f26cce5c47d3967ad < 70f17b48c86622217a58d5099d29242fc9adac58affected
LinuxLinux60a3815da702fd9e4759945f26cce5c47d3967ad < af149a46890e8285d1618bd68b8d159bdb87fdb3affected
LinuxLinux60a3815da702fd9e4759945f26cce5c47d3967ad < e5888acbf1a3d8d021990ce6c6061fd5b2bb21b4affected
LinuxLinux60a3815da702fd9e4759945f26cce5c47d3967ad < 36a0a80f32209238469deb481967d777a3d539eeaffected
LinuxLinux60a3815da702fd9e4759945f26cce5c47d3967ad < 01acb2e8666a6529697141a6017edbf206921913affected
LinuxLinux5.10affected
LinuxLinux0 < 5.10unaffected
LinuxLinux5.10.210 <= 5.10.*unaffected
LinuxLinux5.15.149 <= 5.15.*unaffected
LinuxLinux6.1.76 <= 6.1.*unaffected
LinuxLinux6.6.15 <= 6.6.*unaffected
LinuxLinux6.7.3 <= 6.7.*unaffected
LinuxLinux6.8 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References