Assigner | Linux |
Reserved | 2024-02-19 |
Published | 2024-03-21 |
Updated | 2024-07-05 |
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow anonymous set with timeout flag Anonymous sets are never used with timeout from userspace, reject this. Exception to this rule is NFT_SET_EVAL to ensure legacy meters still work.
Product status
761da2935d6e before e4988d8415bd
761da2935d6e before e9a0d3f376eb
761da2935d6e before fe40ffbca19d
761da2935d6e before 7cdc1be24cc1
761da2935d6e before 72c1efe3f247
761da2935d6e before c0c2176d1814
761da2935d6e before 8e07c1669558
761da2935d6e before 16603605b667
4.1
Any version before 4.1
4.19.312
5.4.274
5.10.215
5.15.154
6.1.84
6.6.24
6.7.12
6.8
References
https://git.kernel.org/stable/c/e4988d8415bd0294d6f9f4a1e7095f8b50a97ca9
https://git.kernel.org/stable/c/e9a0d3f376eb356d54ffce36e7cc37514cbfbd6f
https://git.kernel.org/stable/c/fe40ffbca19dc70d7c6b1e3c77b9ccb404c57351
https://git.kernel.org/stable/c/7cdc1be24cc1bcd56a3e89ac4aef20e31ad09199
https://git.kernel.org/stable/c/72c1efe3f247a581667b7d368fff3bd9a03cd57a
https://git.kernel.org/stable/c/c0c2176d1814b92ea4c8e7eb7c9cd94cd99c1b12
https://git.kernel.org/stable/c/8e07c16695583a66e81f67ce4c46e94dece47ba7
https://git.kernel.org/stable/c/16603605b667b70da974bea8216c93e7db043bf1
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html