CVE-2024-27397

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-27397
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use timestamp to check for set element timeout Add a timestamp field at the beginning of the transaction, store it in the nftables per-netns area. Update set backend .insert, .deactivate and sync gc path to use the timestamp, this avoids that an element expires while control plane transaction is still unfinished. .lookup and .update, which are used from packet path, still use the current time to check if the element has expired. And .get path and dump also since this runs lockless under rcu read size lock. Then, there is async gc which also needs to check the current time since it runs asynchronously from a workqueue.

7.0 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0d40e8cb1d1f56a994cdd2e015af622fdca9ed4d Patch
https://git.kernel.org/stable/c/383182db8d58c4237772ba0764cded4938a235c3 Patch
https://git.kernel.org/stable/c/7395dfacfff65e9938ac0889dafa1ab01e987d15 Patch
https://git.kernel.org/stable/c/7b17de2a71e56c10335b565cc7ad238e6d984379 Patch
https://git.kernel.org/stable/c/7fa2e2960fff8322ce2ded57b5f8e9cbc450b967 Patch
https://git.kernel.org/stable/c/b45176b869673417ace338b87cf9cdb66e2eeb01 Patch
https://git.kernel.org/stable/c/eaf1a29ea5d7dba8e84e9e9f3b3f47d0cd540bfe Patch
https://git.kernel.org/stable/c/f8dfda798650241c1692058713ca4fef8e429061 Patch
https://git.kernel.org/stable/c/383182db8d58c4237772ba0764cded4938a235c3 Patch
https://git.kernel.org/stable/c/7395dfacfff65e9938ac0889dafa1ab01e987d15 Patch
https://git.kernel.org/stable/c/b45176b869673417ace338b87cf9cdb66e2eeb01 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
History

18 Sep 2025, 17:20

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0d40e8cb1d1f56a994cdd2e015af622fdca9ed4d - () https://git.kernel.org/stable/c/0d40e8cb1d1f56a994cdd2e015af622fdca9ed4d - Patch
References () https://git.kernel.org/stable/c/383182db8d58c4237772ba0764cded4938a235c3 - () https://git.kernel.org/stable/c/383182db8d58c4237772ba0764cded4938a235c3 - Patch
References () https://git.kernel.org/stable/c/7395dfacfff65e9938ac0889dafa1ab01e987d15 - () https://git.kernel.org/stable/c/7395dfacfff65e9938ac0889dafa1ab01e987d15 - Patch
References () https://git.kernel.org/stable/c/7b17de2a71e56c10335b565cc7ad238e6d984379 - () https://git.kernel.org/stable/c/7b17de2a71e56c10335b565cc7ad238e6d984379 - Patch
References () https://git.kernel.org/stable/c/7fa2e2960fff8322ce2ded57b5f8e9cbc450b967 - () https://git.kernel.org/stable/c/7fa2e2960fff8322ce2ded57b5f8e9cbc450b967 - Patch
References () https://git.kernel.org/stable/c/b45176b869673417ace338b87cf9cdb66e2eeb01 - () https://git.kernel.org/stable/c/b45176b869673417ace338b87cf9cdb66e2eeb01 - Patch
References () https://git.kernel.org/stable/c/eaf1a29ea5d7dba8e84e9e9f3b3f47d0cd540bfe - () https://git.kernel.org/stable/c/eaf1a29ea5d7dba8e84e9e9f3b3f47d0cd540bfe - Patch
References () https://git.kernel.org/stable/c/f8dfda798650241c1692058713ca4fef8e429061 - () https://git.kernel.org/stable/c/f8dfda798650241c1692058713ca4fef8e429061 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.0
First Time Linux
Linux linux Kernel
CWE CWE-416

24 Mar 2025, 16:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/7fa2e2960fff8322ce2ded57b5f8e9cbc450b967 -

21 Nov 2024, 09:04

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/383182db8d58c4237772ba0764cded4938a235c3 - () https://git.kernel.org/stable/c/383182db8d58c4237772ba0764cded4938a235c3 -
References () https://git.kernel.org/stable/c/7395dfacfff65e9938ac0889dafa1ab01e987d15 - () https://git.kernel.org/stable/c/7395dfacfff65e9938ac0889dafa1ab01e987d15 -
References () https://git.kernel.org/stable/c/b45176b869673417ace338b87cf9cdb66e2eeb01 - () https://git.kernel.org/stable/c/b45176b869673417ace338b87cf9cdb66e2eeb01 -

19 Aug 2024, 05:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/0d40e8cb1d1f56a994cdd2e015af622fdca9ed4d -
  • () https://git.kernel.org/stable/c/7b17de2a71e56c10335b565cc7ad238e6d984379 -
  • () https://git.kernel.org/stable/c/eaf1a29ea5d7dba8e84e9e9f3b3f47d0cd540bfe -
  • () https://git.kernel.org/stable/c/f8dfda798650241c1692058713ca4fef8e429061 -

05 Jul 2024, 08:15

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: netfilter: nf_tables: use la marca de tiempo para verificar el tiempo de espera del elemento establecido. Agregue un campo de marca de tiempo al comienzo de la transacción y guárdelo en el área nftables per-netns. Actualice el conjunto de backend .insert, .deactivate y sincronice la ruta gc para usar la marca de tiempo, esto evita que un elemento caduque mientras la transacción del plano de control aún no ha finalizado. .lookup y .update, que se usan desde la ruta del paquete, aún usan la hora actual para verificar si el elemento ha caducado. Y obtener ruta y volcar también, ya que se ejecuta sin bloqueo bajo el bloqueo de tamaño de lectura de rcu. Luego, está el gc async que también necesita verificar la hora actual, ya que se ejecuta de forma asincrónica desde una cola de trabajo.
References
  • () https://git.kernel.org/stable/c/b45176b869673417ace338b87cf9cdb66e2eeb01 -

14 May 2024, 15:12

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-14 15:12

Updated : 2025-09-18 17:20

NVD link : CVE-2024-27397

Mitre link : CVE-2024-27397

CVE.ORG link : CVE-2024-27397

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free