CVE-2024-26835: netfilter: nf_tables: set dormant flag on hook register failure
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftables: set dormant flag on hook register failure
The Linux kernel CVE team has assigned CVE-2024-26835 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024041714-CVE-2024-26835-083d@gregkh/T
Other sources
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftables: set dormant flag on hook register failure
We need to set the dormant flag again if we fail to register the hooks.
During memory pressure hook registration can fail and we end up with a table marked as active but no registered hooks.
On table/base chain deletion, nftables will attempt to unregister the hook again which yields a warn splat from the nftables core.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26835?
CVE-2024-26835 has been assigned a severity level by the Linux kernel CVE team, but exact details on its severity classification may vary.
How do I fix CVE-2024-26835?
To fix CVE-2024-26835, upgrade the Linux kernel to the recommended version specified in the advisory, such as 5.4.270, 5.10.211, 5.15.150, or later versions.
Which Linux kernel versions are affected by CVE-2024-26835?
CVE-2024-26835 affects specific versions of the Linux kernel such as those below 5.4.270, 5.10.211, 5.15.150, and others mentioned in the advisory.
Is CVE-2024-26835 a local or remote vulnerability?
CVE-2024-26835 is classified as a local vulnerability, requiring local access to exploit.
What systems are impacted by CVE-2024-26835?
CVE-2024-26835 impacts systems running vulnerable versions of the Linux kernel, primarily those from Red Hat and Debian distributions.