CVE-2024-26581
published 2024-02-20CVE-2024-26581: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval element from gc rbtree lazy gc on insert might…
PriorityP340high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
2.22%
80.9th percentile
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_rbtree: skip end interval element from gc
rbtree lazy gc on insert might collect an end interval element that has
been just added in this transactions, skip end interval elements that
are not yet active.
Affected
40 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | linux | < linux 6.1.82-1 (bookworm) | linux 6.1.82-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 5.10.190 < 5.10.210 | 5.10.210 |
| linux | linux | >= 5.15.124 < 5.15.149 | 5.15.149 |
| linux | linux | >= 5.4.262 < 5.4.269 | 5.4.269 |
| linux | linux | >= 50cbb9d195c197af671869c8cadce3bd483735a0 < 2bab493a5624444ec6e648ad0d55a362bcb4c003 | 2bab493a5624444ec6e648ad0d55a362bcb4c003 |
| linux | linux | >= 6.1.43 < 6.1.78 | 6.1.78 |
| linux | linux | >= 6.4.8 < 6.5 | 6.5 |
| linux | linux | >= 8284a79136c384059e85e278da2210b809730287 < c60d252949caf9aba537525195edae6bbabc35eb | c60d252949caf9aba537525195edae6bbabc35eb |
| linux | linux | >= 893cb3c3513cf661a0ff45fe0cfa83fe27131f76 < 4cee42fcf54fec46b344681e7cc4f234bb22f85a | 4cee42fcf54fec46b344681e7cc4f234bb22f85a |
| linux | linux | >= 89a4d1a89751a0fbd520e64091873e19cc0979e8 < 1296c110c5a0b45a8fcf58e7d18bc5da61a565cb | 1296c110c5a0b45a8fcf58e7d18bc5da61a565cb |
| linux | linux | >= acaee227cf79c45a5d2d49c3e9a66333a462802c < 10e9cb39313627f2eae4cd70c4b742074e998fd8 | 10e9cb39313627f2eae4cd70c4b742074e998fd8 |
| linux | linux | >= f718863aca469a109895cb855e6b81fff4827d71 < b734f7a47aeb32a5ba298e4ccc16bb0c52b6dbf7 | b734f7a47aeb32a5ba298e4ccc16bb0c52b6dbf7 |
| linux | linux | >= f718863aca469a109895cb855e6b81fff4827d71 < 6eb14441f10602fa1cf691da9d685718b68b78a9 | 6eb14441f10602fa1cf691da9d685718b68b78a9 |
| linux | linux | >= f718863aca469a109895cb855e6b81fff4827d71 < 60c0c230c6f046da536d3df8b39a20b9a9fd6af0 | 60c0c230c6f046da536d3df8b39a20b9a9fd6af0 |
| linux | linux_kernel | >= 0 < 5.10.216-1 | 5.10.216-1 |
| linux | linux_kernel | >= 0 < 6.1.82-1 | 6.1.82-1 |
| linux | linux_kernel | >= 0 < 6.7.7-1 | 6.7.7-1 |
| linux | linux_kernel | >= 0 < 6.7.7-1 | 6.7.7-1 |
| linux | linux_kernel | >= 0 < 5.4.0-177.197 | 5.4.0-177.197 |
| linux | linux_kernel | >= 0 < 5.15.0-105.115 | 5.15.0-105.115 |
| linux | linux_kernel | >= 0 < 5.4.0-189.209 | 5.4.0-189.209 |
| linux | linux_kernel | >= 0 < 5.15.0-112.122 | 5.15.0-112.122 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_msrc7.8HIGH
vendor_redhat7.8HIGH
vendor_ubuntu7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens SINEC OS
cisa_ics·2025-08-14
Siemens SINEC OS
ICS Advisory
##
Siemens SINEC OS
Release DateAugust 14, 2025
Alert CodeICSA-25-226-15
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3.1 9.1
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: RUGGEDCOM, SCALANCE
- Vulnerabilities: NULL Pointer Dereference, Use After Free, Unchecked Input for Loop Condition, Out-of-bounds Write, Ou
Ubuntu
Kernel Live Patch Security Notice
vendor_ubuntu·2024-06-10·CVSS 7.0
CVE-2023-6270 [HIGH] Kernel Live Patch Security Notice
Title: Kernel Live Patch Security Notice
Summary: Several security issues were fixed in the kernel.
It was discovered that the ATA over Ethernet (AoE) driver in the Linux
kernel contained a race condition, leading to a use-after-free
vulnerability. An attacker could use this to cause a denial of service or
possibly execute arbitrary code.(CVE-2023-6270)
It was discovered that a race condition existed in the AppleTalk networking
subsystem of the Linux kernel, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code.(CVE-2023-51781)
In the Linux kernel, the following vulnerability has been
resolved: netfilter: nft_set_rbtree: skip end interval element from gc
rbtree lazy gc on insert might co
Ubuntu
Linux kernel (Azure) vulnerabilities
vendor_ubuntu·2024-04-24·CVSS 7.8
CVE-2023-52600 [HIGH] Linux kernel (Azure) vulnerabilities
Title: Linux kernel (Azure) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- JFS file system;
- BPF subsystem;
- Netfilter;
(CVE-2023-52600, CVE-2024-26589, CVE-2024-26591, CVE-2024-26581,
CVE-2023-52603)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapack
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2024-04-23·CVSS 6.8
CVE-2023-52600 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Daniele Antonioli discovered that the Secure Simple Pairing and Secure
Connections pairing in the Bluetooth protocol could allow an
unauthenticated user to complete authentication without pairing
credentials. A physically proximate attacker placed between two Bluetooth
devices could use this to subsequently impersonate one of the paired
devices. (CVE-2023-24023)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- JFS file system;
- Netfilter;
(CVE-2024-26581, CVE-2023-52600, CVE-2023-52603)
Instructions: After a standard system update you need to reboot your
Ubuntu
Linux kernel (Low Latency) vulnerabilities
vendor_ubuntu·2024-04-22·CVSS 7.8
CVE-2023-52600 [HIGH] Linux kernel (Low Latency) vulnerabilities
Title: Linux kernel (Low Latency) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- JFS file system;
- BPF subsystem;
- Netfilter;
(CVE-2023-52600, CVE-2024-26589, CVE-2024-26591, CVE-2024-26581,
CVE-2023-52603)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel me
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2024-04-19·CVSS 6.8
CVE-2023-52600 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Daniele Antonioli discovered that the Secure Simple Pairing and Secure
Connections pairing in the Bluetooth protocol could allow an
unauthenticated user to complete authentication without pairing
credentials. A physically proximate attacker placed between two Bluetooth
devices could use this to subsequently impersonate one of the paired
devices. (CVE-2023-24023)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- JFS file system;
- BPF subsystem;
- Netfilter;
(CVE-2023-52603, CVE-2023-52600, CVE-2024-26581, CVE-2024-26589)
Instructions: After a standard syste
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2024-04-19·CVSS 7.8
CVE-2024-26589 [HIGH] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- JFS file system;
- BPF subsystem;
- Netfilter;
(CVE-2023-52600, CVE-2024-26589, CVE-2024-26591, CVE-2024-26581,
CVE-2023-52603)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2024-04-19·CVSS 6.8
CVE-2024-26581 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Daniele Antonioli discovered that the Secure Simple Pairing and Secure
Connections pairing in the Bluetooth protocol could allow an
unauthenticated user to complete authentication without pairing
credentials. A physically proximate attacker placed between two Bluetooth
devices could use this to subsequently impersonate one of the paired
devices. (CVE-2023-24023)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- JFS file system;
- Netfilter;
(CVE-2024-26581, CVE-2023-52600, CVE-2023-52603)
Instructions: After a standard system update you need to reboot your
Ubuntu
Linux kernel (OEM) vulnerabilities
vendor_ubuntu·2024-03-11·CVSS 7.5
CVE-2023-52438 [HIGH] Linux kernel (OEM) vulnerabilities
Title: Linux kernel (OEM) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Pratyush Yadav discovered that the Xen network backend implementation in
the Linux kernel did not properly handle zero length data request, leading
to a null pointer dereference vulnerability. An attacker in a guest VM
could possibly use this to cause a denial of service (host domain crash).
(CVE-2023-46838)
It was discovered that the Habana's AI Processors driver in the Linux
kernel did not properly initialize certain data structures before passing
them to user space. A local attacker could use this to expose sensitive
information (kernel memory). (CVE-2023-50431)
Murray McAllister discovered that the VMware Virtual GPU DRM driver in the
Linux kernel did not properly handle memor
Red Hat
kernel: nftables: nft_set_rbtree skip end interval element from gc
vendor_redhat·2024-02-20·CVSS 7.8
CVE-2024-26581 [HIGH] kernel: nftables: nft_set_rbtree skip end interval element from gc
kernel: nftables: nft_set_rbtree skip end interval element from gc
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_rbtree: skip end interval element from gc
rbtree lazy gc on insert might collect an end interval element that has
been just added in this transactions, skip end interval elements that
are not yet active.
A flaw was found in the Linux kernel’s Netfilter subsystem. This issue occurs in the nft_set_rbtree. rbtree lazy gc on insert, which might collect an end interval element just added in a transaction and skip the end interval elements not yet active.
Statement: Only privileged user (with access to NetFilter) can trigger this bug. The bug actual only for latest versions of the Red Hat Enterprise Linux 9.
Mitigation: 1. This flaw can be
Microsoft
netfilter: nft_set_rbtree: skip end interval element from gc
vendor_msrc·2024-02-13·CVSS 7.8
CVE-2024-26581 [HIGH] CWE-416 netfilter: nft_set_rbtree: skip end interval element from gc
netfilter: nft_set_rbtree: skip end interval element from gc
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
Linux: Linux
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https://
Debian
CVE-2024-26581: linux - In the Linux kernel, the following vulnerability has been resolved: netfilter: ...
vendor_debian·2024·CVSS 7.8
CVE-2024-26581 [HIGH] CVE-2024-26581: linux - In the Linux kernel, the following vulnerability has been resolved: netfilter: ...
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval elements that are not yet active.
Scope: local
bookworm: resolved (fixed in 6.1.82-1)
bullseye: resolved (fixed in 5.10.216-1)
forky: resolved (fixed in 6.7.7-1)
sid: resolved (fixed in 6.7.7-1)
trixie: resolved (fixed in 6.7.7-1)
OSV
Kernel Live Patch Security Notice
osv·2024-06-10·CVSS 7.0
CVE-2023-6270 [HIGH] Kernel Live Patch Security Notice
Kernel Live Patch Security Notice
It was discovered that the ATA over Ethernet (AoE) driver in the Linux
kernel contained a race condition, leading to a use-after-free
vulnerability. An attacker could use this to cause a denial of service or
possibly execute arbitrary code.(CVE-2023-6270)
It was discovered that a race condition existed in the AppleTalk networking
subsystem of the Linux kernel, leading to a use-after-free vulnerability. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code.(CVE-2023-51781)
In the Linux kernel, the following vulnerability has been
resolved: netfilter: nft_set_rbtree: skip end interval element from gc
rbtree lazy gc on insert might collect an end interval element that has
been just added in this tran
OSV
linux-azure-6.5 vulnerabilities
osv·2024-04-24·CVSS 7.8
CVE-2023-52600 [HIGH] linux-azure-6.5 vulnerabilities
linux-azure-6.5 vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- JFS file system;
- BPF subsystem;
- Netfilter;
(CVE-2023-52600, CVE-2024-26589, CVE-2024-26591, CVE-2024-26581,
CVE-2023-52603)
OSV
linux-azure, linux-lowlatency, linux-nvidia vulnerabilities
osv·2024-04-23·CVSS 6.8
CVE-2023-24023 [MEDIUM] linux-azure, linux-lowlatency, linux-nvidia vulnerabilities
linux-azure, linux-lowlatency, linux-nvidia vulnerabilities
Daniele Antonioli discovered that the Secure Simple Pairing and Secure
Connections pairing in the Bluetooth protocol could allow an
unauthenticated user to complete authentication without pairing
credentials. A physically proximate attacker placed between two Bluetooth
devices could use this to subsequently impersonate one of the paired
devices. (CVE-2023-24023)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- JFS file system;
- Netfilter;
(CVE-2024-26581, CVE-2023-52600, CVE-2023-52603)
OSV
linux-lowlatency-hwe-6.5 vulnerabilities
osv·2024-04-22·CVSS 7.8
CVE-2023-52600 [HIGH] linux-lowlatency-hwe-6.5 vulnerabilities
linux-lowlatency-hwe-6.5 vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- JFS file system;
- BPF subsystem;
- Netfilter;
(CVE-2023-52600, CVE-2024-26589, CVE-2024-26591, CVE-2024-26581,
CVE-2023-52603)
OSV
linux, linux-aws, linux-aws-5.15, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.1
osv·2024-04-19·CVSS 6.8
[MEDIUM] linux, linux-aws, linux-aws-5.15, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.1
linux, linux-aws, linux-aws-5.15, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency-hwe-5.15, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities
Daniele Antonioli discovered that the Secure Simple Pairing and Secure
Connections pairing in the Bluetooth protocol could allow an
unauthenticated user to complete authentication without pairing
credentials. A physically proximate attacker placed between two Bluetooth
devices could use this to subsequently impersonate one of the paired
devices. (CVE-2023-24023)
Several security issues were discovered in the Linux kernel.
An attacker could possibly us
OSV
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linu
osv·2024-04-19·CVSS 6.8
[MEDIUM] linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linu
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities
Daniele Antonioli discovered that the Secure Simple Pairing and Secure
Connections pairing in the Bluetooth protocol could allow an
unauthenticated user to complete authentication without pairing
credentials. A physically proximate attacker placed between two Bluetooth
devices could use this to subsequently impersonate one of the paired
devices. (CVE-2023-24023)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in
OSV
linux, linux-aws, linux-aws-6.5, linux-azure, linux-gcp, linux-gcp-6.5, linux-hwe-6.5, linux-laptop, linux-lowlatency, linux-nvidia-6.5, linux-oem-6.5, linux-oracle, linux-oracle-6.5, linux-raspi, lin
osv·2024-04-19·CVSS 7.8
CVE-2023-52600 [HIGH] linux, linux-aws, linux-aws-6.5, linux-azure, linux-gcp, linux-gcp-6.5, linux-hwe-6.5, linux-laptop, linux-lowlatency, linux-nvidia-6.5, linux-oem-6.5, linux-oracle, linux-oracle-6.5, linux-raspi, lin
linux, linux-aws, linux-aws-6.5, linux-azure, linux-gcp, linux-gcp-6.5, linux-hwe-6.5, linux-laptop, linux-lowlatency, linux-nvidia-6.5, linux-oem-6.5, linux-oracle, linux-oracle-6.5, linux-raspi, linux-starfive, linux-starfive-6.5 vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- JFS file system;
- BPF subsystem;
- Netfilter;
(CVE-2023-52600, CVE-2024-26589, CVE-2024-26591, CVE-2024-26581,
CVE-2023-52603)
OSV
linux-oem-6.1 vulnerabilities
osv·2024-03-11·CVSS 7.5
CVE-2023-46838 [HIGH] linux-oem-6.1 vulnerabilities
linux-oem-6.1 vulnerabilities
Pratyush Yadav discovered that the Xen network backend implementation in
the Linux kernel did not properly handle zero length data request, leading
to a null pointer dereference vulnerability. An attacker in a guest VM
could possibly use this to cause a denial of service (host domain crash).
(CVE-2023-46838)
It was discovered that the Habana's AI Processors driver in the Linux
kernel did not properly initialize certain data structures before passing
them to user space. A local attacker could use this to expose sensitive
information (kernel memory). (CVE-2023-50431)
Murray McAllister discovered that the VMware Virtual GPU DRM driver in the
Linux kernel did not properly handle memory objects when storing surfaces,
leading to a use-after-free vulnerability. A
OSV
CVE-2024-26581: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval element from gc rbtree lazy gc on ins
osv·2024-02-20·CVSS 7.8
CVE-2024-26581 [HIGH] CVE-2024-26581: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval element from gc rbtree lazy gc on ins
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval elements that are not yet active.
GHSA
GHSA-92f7-c7hw-58cr: netfilter: nft_set_rbtree: skip end interval element from gc
rbtree lazy gc on insert might collect an end interval element that has
been just added
ghsa_unreviewed·2024-02-20
CVE-2024-26581 [HIGH] CWE-416 GHSA-92f7-c7hw-58cr: netfilter: nft_set_rbtree: skip end interval element from gc
rbtree lazy gc on insert might collect an end interval element that has
been just added
netfilter: nft_set_rbtree: skip end interval element from gc
rbtree lazy gc on insert might collect an end interval element that has
been just added in this transactions, skip end interval elements that
are not yet active.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2024-35800 kernel: efi: fix panic in kdump kernel
bugzilla·2024-05-18·CVSS 7.8
CVE-2024-35800 [HIGH] CVE-2024-35800 kernel: efi: fix panic in kdump kernel
CVE-2024-35800 kernel: efi: fix panic in kdump kernel
In the Linux kernel, the following vulnerability has been resolved:
efi: fix panic in kdump kernel
The Linux kernel CVE team has assigned CVE-2024-35800 to this issue.
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024051738-CVE-2024-35800-219a@gregkh/T
Discussion:
Created kernel tracking bugs for this issue:
Affects: fedora-all [bug 2281238]
---
The result of automatic check (that is developed by Alexander Larkin) for this CVE-2024-35800 is: CHECK Maybe valid. Check manually. with impact MODERATE (that is approximation based on flags DANGER SIMPLEFIX IMPROVEONLY ; these flags parsed automatically based on patche data). Such automatic check happens only for Low/Moderates (and only when not from reporter, but par
Bugzilla
CVE-2024-26581 kernel: nftables: nft_set_rbtree skip end interval element from gc
bugzilla·2024-02-20·CVSS 7.8
CVE-2024-26581 [HIGH] CVE-2024-26581 kernel: nftables: nft_set_rbtree skip end interval element from gc
CVE-2024-26581 kernel: nftables: nft_set_rbtree skip end interval element from gc
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_rbtree: skip end interval element from gc
rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval elements that
are not yet active.
https://git.kernel.org/stable/c/1296c110c5a0b45a8fcf58e7d18bc5da61a565cb
https://git.kernel.org/stable/c/60c0c230c6f046da536d3df8b39a20b9a9fd6af0
https://git.kernel.org/stable/c/6eb14441f10602fa1cf691da9d685718b68b78a9
https://git.kernel.org/stable/c/b734f7a47aeb32a5ba298e4ccc16bb0c52b6dbf7
Discussion:
Created kernel tracking bugs for this issue:
Affects: fedora-all [bug 2265186]
---
This was fixed for Fedora with
https://git.kernel.org/stable/c/10e9cb39313627f2eae4cd70c4b742074e998fd8https://git.kernel.org/stable/c/1296c110c5a0b45a8fcf58e7d18bc5da61a565cbhttps://git.kernel.org/stable/c/2bab493a5624444ec6e648ad0d55a362bcb4c003https://git.kernel.org/stable/c/4cee42fcf54fec46b344681e7cc4f234bb22f85ahttps://git.kernel.org/stable/c/60c0c230c6f046da536d3df8b39a20b9a9fd6af0https://git.kernel.org/stable/c/6eb14441f10602fa1cf691da9d685718b68b78a9https://git.kernel.org/stable/c/b734f7a47aeb32a5ba298e4ccc16bb0c52b6dbf7https://git.kernel.org/stable/c/c60d252949caf9aba537525195edae6bbabc35ebhttps://git.kernel.org/stable/c/10e9cb39313627f2eae4cd70c4b742074e998fd8https://git.kernel.org/stable/c/1296c110c5a0b45a8fcf58e7d18bc5da61a565cbhttps://git.kernel.org/stable/c/2bab493a5624444ec6e648ad0d55a362bcb4c003https://git.kernel.org/stable/c/4cee42fcf54fec46b344681e7cc4f234bb22f85ahttps://git.kernel.org/stable/c/60c0c230c6f046da536d3df8b39a20b9a9fd6af0https://git.kernel.org/stable/c/6eb14441f10602fa1cf691da9d685718b68b78a9https://git.kernel.org/stable/c/b734f7a47aeb32a5ba298e4ccc16bb0c52b6dbf7https://git.kernel.org/stable/c/c60d252949caf9aba537525195edae6bbabc35ebhttps://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
2024-02-20
Published