PT-2024-8408 · Linux+9 · Linux Kernel+9

Pablo Neira Ayuso

·

Published

2024-04-04

·

Updated

2025-09-29

·

CVE-2024-35900

CVSS v3.1

5.5

Medium

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The vulnerability is related to the netfilter component of the Linux kernel, specifically the nf tables module. When the dormant flag is toggled, hooks are disabled in the commit phase by iterating over current chains in the table. A configuration that allows for an inconsistent state can trigger a warning when trying to unregister a chain that is already unregistered. This issue may be exploited to elevate privileges in the system.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-682

Related Identifiers

ALSA-2024:5101
ALSA-2024:5102
ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
BDU:2024-09967
CESA-2024_5101
CESA-2024_5102
CVE-2024-35900
DLA-3842-1
INFSA-2024_5101
INFSA-2024_5102
INFSA-2024_9315
OESA-2024-1694
OPENSUSE-SU-2024_2372-1
OPENSUSE-SU-2024_2394-1
RHSA-2024:5101
RHSA-2024:5102
RHSA-2024:9315
RHSA-2024_5101
RHSA-2024_5102
RHSA-2024_9315
RHSA-2025:3935
RLSA-2024:5101
RLSA-2024:5102
RXSA-2024:5101
SUSE-SU-2024:2372-1
SUSE-SU-2024:2394-1
SUSE-SU-2024:2571-1
SUSE-SU-2024:2896-1
SUSE-SU-2024:2939-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
USN-6893-1
USN-6893-2
USN-6893-3
USN-6896-1
USN-6896-2
USN-6896-3
USN-6896-4
USN-6896-5
USN-6898-1
USN-6898-2
USN-6898-3
USN-6898-4
USN-6917-1
USN-6918-1
USN-6919-1
USN-6927-1
USN-7019-1

Affected Products

Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu