PT-2025-3016 · Linux+3 · Linux Kernel+3

Pablo Neira Ayuso · Published 2024-12-21 · Updated 2026-03-27 · CVE-2024-54031

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74

Description The Linux kernel has a vulnerability in the netfilter module, specifically in the nft set hash function, where an unaligned atomic read on the struct nft set ext can occur. This happens when accessing the genmask field in the struct nft set ext, resulting in an unaligned atomic read. The issue can cause a kernel paging request error, leading to a system crash. To address this, the struct nft set ext needs to be aligned to the word size.

Recommendations Update to Linux kernel version 6.6.74 or later to fix the vulnerability. As a temporary workaround, consider aligning the struct nft set ext to the word size to prevent unaligned atomic reads.

Exploit

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

BDU:2025-04489

CVE-2024-54031

DLA-4075-1

DLA-4076-1

MGASA-2025-0030

MGASA-2025-0032

OPENSUSE-SU-2026:20287-1

SUSE-SU-2026:0474-1

SUSE-SU-2026:0475-1

SUSE-SU-2026:0495-1

SUSE-SU-2026:0496-1

SUSE-SU-2026:0617-1

SUSE-SU-2026:1131-1

SUSE-SU-2026:20555-1

SUSE-SU-2026:20599-1

SUSE-SU-2026:20615-1

Affected Products

Astra Linux

Debian

Linux Kernel

Red Os

References · 1313

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/54xxx/CVE-2024-54031.json · Exploit
• https://osv.dev/vulnerability/CVE-2024-54031 · Vendor Advisory
• https://git.kernel.org/stable/c/542ed8145e6f9392e3d0a86a0e9027d2ffd183e4 · Patch
• https://git.kernel.org/stable/c/607774a13764676d4b8be9c8b9c66b8cf3469043 · Patch
• https://git.kernel.org/stable/c/4f49349c1963e507aa37c1ec05178faeb0103959 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2026:0496-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20287-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-54031 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1131-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0474-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-54031 · Vendor Advisory
• https://git.kernel.org/stable/c/d24cbc43cc7b41a0824b0bc6ec4d8436d8d7a9c0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-54031 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-54031 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0475-1 · Vendor Advisory