medium
5.5
CWE
667
EPSS
0.043%
Advisory Published
CVE Published
Updated

CVE-2024-26643: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout

First published: Thu Mar 21 2024(Updated: )

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout The Linux kernel CVE team has assigned <a href="https://access.redhat.com/security/cve/CVE-2024-26643">CVE-2024-26643</a> to this issue. Upstream advisory: <a href="https://lore.kernel.org/linux-cve-announce/2024032150-CVE-2024-26643-4f9d@gregkh/T">https://lore.kernel.org/linux-cve-announce/2024032150-CVE-2024-26643-4f9d@gregkh/T</a>

Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Affected SoftwareAffected VersionHow to fix
redhat/kernel<6.8
6.8
Linux Kernel<5.4.274
Linux Kernel>=5.5<5.10.215
Linux Kernel>=5.11<5.15.154
Linux Kernel>=5.16<6.1.84
Linux Kernel>=6.2<6.6.24
Linux Kernel>=6.7<6.7.12
Debian Linux=10.0
IBM Security Verify Governance - Identity Manager<=ISVG 10.0.2
IBM Security Verify Governance, Identity Manager Software Stack<=ISVG 10.0.2
IBM Security Verify Governance, Identity Manager Virtual Appliance<=ISVG 10.0.2
IBM Security Verify Governance Identity Manager Container<=ISVG 10.0.2
debian/linux
5.10.223-1
5.10.234-1
6.1.129-1
6.1.135-1
6.12.22-1
6.12.25-1

Remedy

https://git.kernel.org/stable/c/291cca35818bd52a407bc37ab45a15816039e363

Remedy

https://git.kernel.org/stable/c/406b0241d0eb598a0b330ab20ae325537d8d8163

Remedy

https://git.kernel.org/stable/c/5224afbc30c3ca9ba23e752f0f138729b2c48dd8

Remedy

https://git.kernel.org/stable/c/552705a3650bbf46a22b1adedc1b04181490fc36

Remedy

https://git.kernel.org/stable/c/b2d6f9a5b1cf968f1eaa71085ceeb09c2cb276b1

Remedy

https://git.kernel.org/stable/c/d75a589bb92af1abf3b779cfcd1977ca11b27033

Remedy

https://git.kernel.org/stable/c/e2d45f467096e931044f0ab7634499879d851a5c

Remedy

https://git.kernel.org/stable/c/edcf1a3f182ecf8b6b805f0ce90570ea98c5f6bf

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

Frequently Asked Questions

  • What is the severity of CVE-2024-26643?

    CVE-2024-26643 has been assigned a severity rating that indicates a potential impact on the Linux kernel's netfilter functionality.

  • How do I fix CVE-2024-26643?

    To fix CVE-2024-26643, upgrade to the latest kernel version as specified by your Linux distribution.

  • Which Linux kernel versions are affected by CVE-2024-26643?

    CVE-2024-26643 affects specific versions of the Linux kernel, including those prior to the fixes in versions 6.8 and various patches in the 5.10 and 6.1 series.

  • Is there a workaround for CVE-2024-26643?

    Currently, there is no known workaround for CVE-2024-26643; updates to the kernel are recommended to mitigate the vulnerability.

  • What components of the Linux kernel are impacted by CVE-2024-26643?

    CVE-2024-26643 primarily impacts the netfilter component of the Linux kernel, related to functionality around anonymous sets with timeouts.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203