Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval elements that are not yet active.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian | Debian Linux | 10.0 |
| Linux | Linux Kernel | >= 5.4.262, < 5.4.269 |
References
- https://git.kernel.org/stable/c/10e9cb39313627f2eae4cd70c4b742074e998fd8Patch
- https://git.kernel.org/stable/c/1296c110c5a0b45a8fcf58e7d18bc5da61a565cbPatch
- https://git.kernel.org/stable/c/2bab493a5624444ec6e648ad0d55a362bcb4c003Patch
- https://git.kernel.org/stable/c/4cee42fcf54fec46b344681e7cc4f234bb22f85aPatch
- https://git.kernel.org/stable/c/60c0c230c6f046da536d3df8b39a20b9a9fd6af0Patch
- https://git.kernel.org/stable/c/6eb14441f10602fa1cf691da9d685718b68b78a9Patch
- https://git.kernel.org/stable/c/b734f7a47aeb32a5ba298e4ccc16bb0c52b6dbf7Patch
- https://git.kernel.org/stable/c/c60d252949caf9aba537525195edae6bbabc35ebPatch
- https://git.kernel.org/stable/c/10e9cb39313627f2eae4cd70c4b742074e998fd8Patch
- https://git.kernel.org/stable/c/1296c110c5a0b45a8fcf58e7d18bc5da61a565cbPatch
- https://git.kernel.org/stable/c/2bab493a5624444ec6e648ad0d55a362bcb4c003Patch
- https://git.kernel.org/stable/c/4cee42fcf54fec46b344681e7cc4f234bb22f85aPatch
- https://git.kernel.org/stable/c/60c0c230c6f046da536d3df8b39a20b9a9fd6af0Patch
- https://git.kernel.org/stable/c/6eb14441f10602fa1cf691da9d685718b68b78a9Patch
- https://git.kernel.org/stable/c/b734f7a47aeb32a5ba298e4ccc16bb0c52b6dbf7Patch
FAQ
What is CVE-2024-26581?
CVE-2024-26581 is a vulnerability with a CVSS score of 7.8 (HIGH). In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that h...
How severe is CVE-2024-26581?
CVE-2024-26581 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-26581?
Check the references section above for vendor advisories and patch information. Affected products include: Debian Debian Linux, Linux Linux Kernel.