PT-2024-9915 · Linux+9 · Linux Kernel+9
Published
2024-02-19
·
Updated
2025-09-29
·
CVE-2024-26642
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to the netfilter component of the Linux kernel, specifically with the nf tables subsystem. It involves disallowing anonymous sets with a timeout flag, as anonymous sets are never used with timeout from userspace. An exception to this rule is made for NFT SET EVAL to ensure legacy meters still work. The vulnerability is related to incorrect control of resource identifiers, which could allow an attacker to elevate their privileges.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu