CVE-2024-27019

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() nft_unregister_obj() can concurrent with __nft_obj_type_get(), and there is not any protection when iterate over nf_tables_objects list in __nft_obj_type_get(). Therefore, there is potential data-race of nf_tables_objects list entry. Use list_for_each_entry_rcu() to iterate over nf_tables_objects list in __nft_obj_type_get(), and use rcu_read_lock() in the caller nft_obj_type_get() to protect the entire type query process.

Reserved 2024-02-19 | Published 2024-05-01 | Updated 2024-12-19 | Assigner Linux

Product status

Default status
unaffected

e50092404c1bc7aaeb0a0f4077fa6f07b073a20f before cade34279c2249eafe528564bd2e203e4ff15f88
affected

e50092404c1bc7aaeb0a0f4077fa6f07b073a20f before 379bf7257bc5f2a1b1ca8514e08a871b7bf6d920
affected

e50092404c1bc7aaeb0a0f4077fa6f07b073a20f before df7c0fb8c2b9f9cac65659332581b19682a71349
affected

e50092404c1bc7aaeb0a0f4077fa6f07b073a20f before ad333578f736d56920e090d7db1f8dec891d815e
affected

e50092404c1bc7aaeb0a0f4077fa6f07b073a20f before 4ca946b19caf655a08d5e2266d4d5526025ebb73
affected

e50092404c1bc7aaeb0a0f4077fa6f07b073a20f before d78d867dcea69c328db30df665be5be7d0148484
affected

Default status
affected

4.10
affected

Any version before 4.10
unaffected

5.10.219
unaffected

5.15.157
unaffected

6.1.88
unaffected

6.6.29
unaffected

6.8.8
unaffected

6.9
unaffected

References

git.kernel.org/...c/cade34279c2249eafe528564bd2e203e4ff15f88

git.kernel.org/...c/379bf7257bc5f2a1b1ca8514e08a871b7bf6d920

git.kernel.org/...c/df7c0fb8c2b9f9cac65659332581b19682a71349

git.kernel.org/...c/ad333578f736d56920e090d7db1f8dec891d815e

git.kernel.org/...c/4ca946b19caf655a08d5e2266d4d5526025ebb73

git.kernel.org/...c/d78d867dcea69c328db30df665be5be7d0148484

cve.org (CVE-2024-27019)

nvd.nist.gov (CVE-2024-27019)

Download JSON