CVE-2024-26642

netfilter: nf_tables: disallow anonymous set with timeout flag

State: Published
Severity: 7.8 High
Published: Mar 21, 2024
Updated: Oct 15, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: disallow anonymous set with timeout flag

Anonymous sets are never used with timeout from userspace, reject this. Exception to this rule is NFT_SET_EVAL to ensure legacy meters still work.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	761da2935d6e18d178582dbdf315a3a458555505 to before e4988d8415bd0294d6f9f4a1e7095f8b50a97ca9Affected 761da2935d6e18d178582dbdf315a3a458555505 to before e9a0d3f376eb356d54ffce36e7cc37514cbfbd6fAffected 761da2935d6e18d178582dbdf315a3a458555505 to before fe40ffbca19dc70d7c6b1e3c77b9ccb404c57351Affected 761da2935d6e18d178582dbdf315a3a458555505 to before 7cdc1be24cc1bcd56a3e89ac4aef20e31ad09199Affected 761da2935d6e18d178582dbdf315a3a458555505 to before 72c1efe3f247a581667b7d368fff3bd9a03cd57aAffected 761da2935d6e18d178582dbdf315a3a458555505 to before c0c2176d1814b92ea4c8e7eb7c9cd94cd99c1b12Affected 761da2935d6e18d178582dbdf315a3a458555505 to before 8e07c16695583a66e81f67ce4c46e94dece47ba7Affected 761da2935d6e18d178582dbdf315a3a458555505 to before 16603605b667b70da974bea8216c93e7db043bf1Affected
LinuxLinux	4.1Affected before 4.1Not affected 4.19.312 through 4.19.Not affected 5.4.274 through 5.4.Not affected 5.10.215 through 5.10.Not affected 5.15.154 through 5.15.Not affected 6.1.84 through 6.1.Not affected 6.6.24 through 6.6.Not affected 6.7.12 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

761da2935d6e18d178582dbdf315a3a458555505 to before e4988d8415bd0294d6f9f4a1e7095f8b50a97ca9Affected
761da2935d6e18d178582dbdf315a3a458555505 to before e9a0d3f376eb356d54ffce36e7cc37514cbfbd6fAffected
761da2935d6e18d178582dbdf315a3a458555505 to before fe40ffbca19dc70d7c6b1e3c77b9ccb404c57351Affected
761da2935d6e18d178582dbdf315a3a458555505 to before 7cdc1be24cc1bcd56a3e89ac4aef20e31ad09199Affected
761da2935d6e18d178582dbdf315a3a458555505 to before 72c1efe3f247a581667b7d368fff3bd9a03cd57aAffected
761da2935d6e18d178582dbdf315a3a458555505 to before c0c2176d1814b92ea4c8e7eb7c9cd94cd99c1b12Affected
761da2935d6e18d178582dbdf315a3a458555505 to before 8e07c16695583a66e81f67ce4c46e94dece47ba7Affected
761da2935d6e18d178582dbdf315a3a458555505 to before 16603605b667b70da974bea8216c93e7db043bf1Affected

LinuxLinux

4.1Affected
before 4.1Not affected
4.19.312 through 4.19.*Not affected
5.4.274 through 5.4.*Not affected
5.10.215 through 5.10.*Not affected
5.15.154 through 5.15.*Not affected
6.1.84 through 6.1.*Not affected
6.6.24 through 6.6.*Not affected
6.7.12 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.