IM
IronMonkey Threat Research

CVE-2024-35897 HIGH

Published: 2024-05-19 | Last Modified: 2026-08-04 | Status: Modified

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: discard table flag update with pending basechain deletion Hook unregistration is deferred to the commit phase, same occurs with hook updates triggered by the table dormant flag. When both commands are combined, this results in deleting a basechain while leaving its hook still registered in the core.

Additional Descriptions (1)

En el kernel de Linux, se resolvió la siguiente vulnerabilidad: netfilter: nf_tables: descartar actualización del indicador de tabla con eliminación pendiente de la cadena base. La cancelación del registro del gancho se difiere hasta la fase de confirmación; lo mismo ocurre con las actualizaciones del gancho activadas por el indicador inactivo de la tabla. Cuando se combinan ambos comandos, esto da como resultado la eliminación de una cadena base y deja su gancho aún registrado en el núcleo.

CVSS Metrics

Base Score: 5.5 (MEDIUM)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.8

Impact Score: 3.6

Weaknesses

Source Type Description
[email protected] Primary
en NVD-CWE-noinfo

Affected Products

Vendor Product Version Update Type
linux linux_kernel * <built-in method update of dict object at 0x7fd38492ba40> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd3695ac5c0> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd36beba300> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd2dbc28540> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd384928700> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd2983c5780> Operating System
linux linux_kernel 5.13 <built-in method update of dict object at 0x7fd3695ae640> Operating System
linux linux_kernel 5.13 <built-in method update of dict object at 0x7fd36b50a240> Operating System
linux linux_kernel 5.13 <built-in method update of dict object at 0x7fd2dbc29600> Operating System
linux linux_kernel 5.13 <built-in method update of dict object at 0x7fd38492b900> Operating System
linux linux_kernel 6.9 <built-in method update of dict object at 0x7fd2dbc29e40> Operating System
linux linux_kernel 6.9 <built-in method update of dict object at 0x7fd340a40300> Operating System
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd39f963e00> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:5.13:-:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:5.13:rc6:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:5.13:rc7:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

References