CVE-2024-27065: netfilter: nf_tables: do not compare internal table flags on updates
First published: Wed May 01 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not compare internal table flags on updates Restore skipping transaction if table update does not modify flags.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel | <5.4.273 | 5.4.273 |
| redhat/kernel | <5.10.214 | 5.10.214 |
| redhat/kernel | <5.15.153 | 5.15.153 |
| redhat/kernel | <6.1.83 | 6.1.83 |
| redhat/kernel | <6.6.23 | 6.6.23 |
| redhat/kernel | <6.7.11 | 6.7.11 |
| redhat/kernel | <6.8.2 | 6.8.2 |
| redhat/kernel | <6.9 | 6.9 |
| debian/linux | 5.10.223-1 5.10.226-1 6.1.123-1 6.1.119-1 6.12.11-1 6.12.12-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/2531f907d3e40a6173090f10670ae76d117ab27b
- https://git.kernel.org/stable/c/3443e57654f90c9a843ab6a6040c10709fd033aa
- https://git.kernel.org/stable/c/4a0e7f2decbf9bd72461226f1f5f7dcc4b08f139
- https://git.kernel.org/stable/c/4d37f12707ee965d338028732575f0b85f6d9e4f
- https://git.kernel.org/stable/c/640dbf688ba955e83e03de84fbdda8e570b7cce4
- https://git.kernel.org/stable/c/9683cb6c2c6c0f45537bf0b8868b5d38fcb63fc7
- https://git.kernel.org/stable/c/df257c435e51651c43b86326d112ddadda76350e
- https://git.kernel.org/stable/c/fcf32a5bfcb8a57ac0ce717fcfa4d688c91f1005
- https://git.kernel.org/stable/c/845083249d6a392f3a88804e1669bdb936ee129f
- https://launchpad.net/bugs/cve/CVE-2024-27065
- https://access.redhat.com/security/cve/CVE-2024-27065
- https://lore.kernel.org/linux-cve-announce/2024050132-CVE-2024-27065-8c9d@gregkh/T
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2278381
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2278380#c10
- https://access.redhat.com/security/cve/CVE-2023-1095
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2278380#c11
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2278380#c12
- https://one.redhat.com/rhel-development-guide/#assembly_cve-process_assembly_security-practices
- https://access.redhat.com/errata/RHSA-2024:4823
- https://access.redhat.com/errata/RHSA-2024:4831
- https://access.redhat.com/errata/RHSA-2024:5102
- https://access.redhat.com/errata/RHSA-2024:5101
- https://access.redhat.com/errata/RHSA-2024:5363
- https://bugzilla.redhat.com/show_bug.cgi?id=2278380
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27065
- https://nvd.nist.gov/vuln/detail/CVE-2024-27065
- https://security-tracker.debian.org/tracker/CVE-2024-27065
- https://ubuntu.com/security/CVE-2024-27065
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
- https://git.kernel.org/linus/4a0e7f2decbf9bd72461226f1f5f7dcc4b08f139
Frequently Asked Questions
What is the severity of CVE-2024-27065?
CVE-2024-27065 has been resolved as a significant vulnerability in the Linux kernel that affected netfilter's handling of table flags.
How do I fix CVE-2024-27065?
To fix CVE-2024-27065, you should upgrade to the latest Linux kernel versions specified in the vulnerability report, such as 5.4.273, 5.10.214, 5.15.153, 6.1.83, and others.
Which versions of Linux kernels are affected by CVE-2024-27065?
CVE-2024-27065 affects multiple Linux kernel versions prior to the mentioned updates including versions 5.4 to 6.9.
Is CVE-2024-27065 related to network security?
Yes, CVE-2024-27065 specifically impacts network filtering functionalities within the Linux kernel.
What types of Linux distributions are impacted by CVE-2024-27065?
CVE-2024-27065 affects both Red Hat and Debian based Linux distributions due to vulnerabilities in their kernel packages.
- agent/title
- agent/type
- agent/remedy
- agent/first-publish-date
- agent/author
- collector/launchpad-cve
- source/Launchpad
- agent/severity
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-27065
- agent/software-canonical-lookup
- collector/nvd-api
- source/NVD
- collector/usn-cve
- source/Ubuntu
- agent/event
- collector/nvd-cve
- collector/mitre-cve
- source/MITRE
- agent/description
- agent/last-modified-date
- agent/references
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- collector/security-tracker-debian
- source/Debian
- package-manager/redhat
- package-manager/debian