PT-2024-5778 · Linux+4 · Linux Kernel+4
Ale Crismani
+1
·
Published
2024-03-11
·
Updated
2025-09-29
·
CVE-2024-26910
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a performance regression in the swap operation of the netfilter ipset component in the Linux kernel. A race condition between swap/destroy and kernel side add/del/test operations has been fixed by moving the synchronize rcu() call from the swap function to the destroy function and using call rcu() instead. This change was necessary because simply calling the destroy functions as an rcu callback does not work for sets with timeout, which use garbage collectors that need to be cancelled at destroy. The destroy functions have been split into two parts: one for cancelling garbage collectors safely at the execution of the command received by netlink, and another for moving the remaining part into the rcu callback.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu