Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: set dormant flag on hook register failure We need to set the dormant flag again if we fail to register the hooks. During memory pressure hook registration can fail and we end up with a table marked as active but no registered hooks. On table/base chain deletion, nf_tables will attempt to unregister the hook again which yields a warn splat from the nftables core.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.4.262, < 5.4.270 |
| Debian | Debian Linux | 10.0 |
References
- https://git.kernel.org/stable/c/0c9302a6da262e6ab6a6c1d30f04a6130ed97376Patch
- https://git.kernel.org/stable/c/31ea574aeca1aa488e18716459bde057217637afPatch
- https://git.kernel.org/stable/c/664264a5c55bf97a9c571c557d477b75416199bePatch
- https://git.kernel.org/stable/c/6f2496366426cec18ba53f1c7f6c3ac307ca6a95Patch
- https://git.kernel.org/stable/c/a6411f3c48f991c19aaf9a24fce36865fbba28d7Patch
- https://git.kernel.org/stable/c/ae4360cbd385f0d7a8a86d5723e50448cc6318f3Patch
- https://git.kernel.org/stable/c/bccebf64701735533c8db37773eeacc6566cc8ecPatch
- https://git.kernel.org/stable/c/f2135bbf14949687e96cabb13d8a91ae3deb9069Patch
- https://git.kernel.org/stable/c/0c9302a6da262e6ab6a6c1d30f04a6130ed97376Patch
- https://git.kernel.org/stable/c/31ea574aeca1aa488e18716459bde057217637afPatch
- https://git.kernel.org/stable/c/664264a5c55bf97a9c571c557d477b75416199bePatch
- https://git.kernel.org/stable/c/6f2496366426cec18ba53f1c7f6c3ac307ca6a95Patch
- https://git.kernel.org/stable/c/a6411f3c48f991c19aaf9a24fce36865fbba28d7Patch
- https://git.kernel.org/stable/c/ae4360cbd385f0d7a8a86d5723e50448cc6318f3Patch
- https://git.kernel.org/stable/c/bccebf64701735533c8db37773eeacc6566cc8ecPatch
FAQ
What is CVE-2024-26835?
CVE-2024-26835 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: set dormant flag on hook register failure We need to set the dormant flag again if we fail to register the h...
How severe is CVE-2024-26835?
CVE-2024-26835 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-26835?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Debian Debian Linux.