CVE-2024-26581

netfilter: nft_set_rbtree: skip end interval element from gc

State: Published
Severity: 7.8 High
Published: Feb 20, 2024
Updated: Aug 5, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_rbtree: skip end interval element from gc

rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval elements that are not yet active.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8284a79136c384059e85e278da2210b809730287 to before c60d252949caf9aba537525195edae6bbabc35ebAffected acaee227cf79c45a5d2d49c3e9a66333a462802c to before 10e9cb39313627f2eae4cd70c4b742074e998fd8Affected 893cb3c3513cf661a0ff45fe0cfa83fe27131f76 to before 4cee42fcf54fec46b344681e7cc4f234bb22f85aAffected 50cbb9d195c197af671869c8cadce3bd483735a0 to before 2bab493a5624444ec6e648ad0d55a362bcb4c003Affected 89a4d1a89751a0fbd520e64091873e19cc0979e8 to before 1296c110c5a0b45a8fcf58e7d18bc5da61a565cbAffected f718863aca469a109895cb855e6b81fff4827d71 to before b734f7a47aeb32a5ba298e4ccc16bb0c52b6dbf7Affected f718863aca469a109895cb855e6b81fff4827d71 to before 6eb14441f10602fa1cf691da9d685718b68b78a9Affected f718863aca469a109895cb855e6b81fff4827d71 to before 60c0c230c6f046da536d3df8b39a20b9a9fd6af0Affected cd66733932399475fe933cb3ec03e687ed401462Affected 5.4.262 to before 5.4.269Affected 5.10.190 to before 5.10.210Affected 5.15.124 to before 5.15.149Affected 6.1.43 to before 6.1.78Affected 6.4.8 to before 6.5Affected
LinuxLinux	6.5Affected before 6.5Not affected 5.4.269 through 5.4.Not affected 5.10.210 through 5.10.Not affected 5.15.149 through 5.15.Not affected 6.1.78 through 6.1.Not affected 6.6.17 through 6.6.Not affected 6.7.5 through 6.7.Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

8284a79136c384059e85e278da2210b809730287 to before c60d252949caf9aba537525195edae6bbabc35ebAffected
acaee227cf79c45a5d2d49c3e9a66333a462802c to before 10e9cb39313627f2eae4cd70c4b742074e998fd8Affected
893cb3c3513cf661a0ff45fe0cfa83fe27131f76 to before 4cee42fcf54fec46b344681e7cc4f234bb22f85aAffected
50cbb9d195c197af671869c8cadce3bd483735a0 to before 2bab493a5624444ec6e648ad0d55a362bcb4c003Affected
89a4d1a89751a0fbd520e64091873e19cc0979e8 to before 1296c110c5a0b45a8fcf58e7d18bc5da61a565cbAffected
f718863aca469a109895cb855e6b81fff4827d71 to before b734f7a47aeb32a5ba298e4ccc16bb0c52b6dbf7Affected
f718863aca469a109895cb855e6b81fff4827d71 to before 6eb14441f10602fa1cf691da9d685718b68b78a9Affected
f718863aca469a109895cb855e6b81fff4827d71 to before 60c0c230c6f046da536d3df8b39a20b9a9fd6af0Affected
cd66733932399475fe933cb3ec03e687ed401462Affected
5.4.262 to before 5.4.269Affected
5.10.190 to before 5.10.210Affected
5.15.124 to before 5.15.149Affected
6.1.43 to before 6.1.78Affected
6.4.8 to before 6.5Affected

LinuxLinux

6.5Affected
before 6.5Not affected
5.4.269 through 5.4.*Not affected
5.10.210 through 5.10.*Not affected
5.15.149 through 5.15.*Not affected
6.1.78 through 6.1.*Not affected
6.6.17 through 6.6.*Not affected
6.7.5 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.