CVE-2024-27019

netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()

State: Published
Severity: 7.8 High
Published: May 1, 2024
Updated: Aug 5, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()

nft_unregister_obj() can concurrent with __nft_obj_type_get(), and there is not any protection when iterate over nf_tables_objects list in __nft_obj_type_get(). Therefore, there is potential data-race of nf_tables_objects list entry.

Use list_for_each_entry_rcu() to iterate over nf_tables_objects list in __nft_obj_type_get(), and use rcu_read_lock() in the caller nft_obj_type_get() to protect the entire type query process.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e50092404c1bc7aaeb0a0f4077fa6f07b073a20f to before cade34279c2249eafe528564bd2e203e4ff15f88Affected e50092404c1bc7aaeb0a0f4077fa6f07b073a20f to before 379bf7257bc5f2a1b1ca8514e08a871b7bf6d920Affected e50092404c1bc7aaeb0a0f4077fa6f07b073a20f to before df7c0fb8c2b9f9cac65659332581b19682a71349Affected e50092404c1bc7aaeb0a0f4077fa6f07b073a20f to before ad333578f736d56920e090d7db1f8dec891d815eAffected e50092404c1bc7aaeb0a0f4077fa6f07b073a20f to before 4ca946b19caf655a08d5e2266d4d5526025ebb73Affected e50092404c1bc7aaeb0a0f4077fa6f07b073a20f to before d78d867dcea69c328db30df665be5be7d0148484Affected
LinuxLinux	4.10Affected before 4.10Not affected 5.10.219 through 5.10.Not affected 5.15.157 through 5.15.Not affected 6.1.88 through 6.1.Not affected 6.6.29 through 6.6.Not affected 6.8.8 through 6.8.*Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

e50092404c1bc7aaeb0a0f4077fa6f07b073a20f to before cade34279c2249eafe528564bd2e203e4ff15f88Affected
e50092404c1bc7aaeb0a0f4077fa6f07b073a20f to before 379bf7257bc5f2a1b1ca8514e08a871b7bf6d920Affected
e50092404c1bc7aaeb0a0f4077fa6f07b073a20f to before df7c0fb8c2b9f9cac65659332581b19682a71349Affected
e50092404c1bc7aaeb0a0f4077fa6f07b073a20f to before ad333578f736d56920e090d7db1f8dec891d815eAffected
e50092404c1bc7aaeb0a0f4077fa6f07b073a20f to before 4ca946b19caf655a08d5e2266d4d5526025ebb73Affected
e50092404c1bc7aaeb0a0f4077fa6f07b073a20f to before d78d867dcea69c328db30df665be5be7d0148484Affected

LinuxLinux

4.10Affected
before 4.10Not affected
5.10.219 through 5.10.*Not affected
5.15.157 through 5.15.*Not affected
6.1.88 through 6.1.*Not affected
6.6.29 through 6.6.*Not affected
6.8.8 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.