CVE-2024-26808

netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain

State: Published
Severity: 7.8 High
Published: Apr 4, 2024
Updated: Aug 5, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain

Remove netdevice from inet/ingress basechain in case NETDEV_UNREGISTER event is reported, otherwise a stale reference to netdevice remains in the hook list.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	60a3815da702fd9e4759945f26cce5c47d3967ad to before 9489e214ea8f2a90345516016aa51f2db3a8cc2fAffected 60a3815da702fd9e4759945f26cce5c47d3967ad to before 70f17b48c86622217a58d5099d29242fc9adac58Affected 60a3815da702fd9e4759945f26cce5c47d3967ad to before af149a46890e8285d1618bd68b8d159bdb87fdb3Affected 60a3815da702fd9e4759945f26cce5c47d3967ad to before e5888acbf1a3d8d021990ce6c6061fd5b2bb21b4Affected 60a3815da702fd9e4759945f26cce5c47d3967ad to before 36a0a80f32209238469deb481967d777a3d539eeAffected 60a3815da702fd9e4759945f26cce5c47d3967ad to before 01acb2e8666a6529697141a6017edbf206921913Affected
LinuxLinux	5.10Affected before 5.10Not affected 5.10.210 through 5.10.Not affected 5.15.149 through 5.15.Not affected 6.1.76 through 6.1.Not affected 6.6.15 through 6.6.Not affected 6.7.3 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

60a3815da702fd9e4759945f26cce5c47d3967ad to before 9489e214ea8f2a90345516016aa51f2db3a8cc2fAffected
60a3815da702fd9e4759945f26cce5c47d3967ad to before 70f17b48c86622217a58d5099d29242fc9adac58Affected
60a3815da702fd9e4759945f26cce5c47d3967ad to before af149a46890e8285d1618bd68b8d159bdb87fdb3Affected
60a3815da702fd9e4759945f26cce5c47d3967ad to before e5888acbf1a3d8d021990ce6c6061fd5b2bb21b4Affected
60a3815da702fd9e4759945f26cce5c47d3967ad to before 36a0a80f32209238469deb481967d777a3d539eeAffected
60a3815da702fd9e4759945f26cce5c47d3967ad to before 01acb2e8666a6529697141a6017edbf206921913Affected

LinuxLinux

5.10Affected
before 5.10Not affected
5.10.210 through 5.10.*Not affected
5.15.149 through 5.15.*Not affected
6.1.76 through 6.1.*Not affected
6.6.15 through 6.6.*Not affected
6.7.3 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.