CVE-2024-27397 — Use After Free in Linux
Severity
7.0HIGHNVD
OSV7.8OSV5.5
EPSS
0.0%
top 88.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 14
Latest updateNov 21
Description
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: use timestamp to check for set element timeout
Add a timestamp field at the beginning of the transaction, store it
in the nftables per-netns area.
Update set backend .insert, .deactivate and sync gc path to use the
timestamp, this avoids that an element expires while control plane
transaction is still unfinished.
.lookup and .update, which are used from packet path, still use the
current time to check i…
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9
Affected Packages15 packages
▶CVEListV5linux/linuxc3e1b005ed1cc068fc9d454a6e745830d55d251d — f8dfda798650241c1692058713ca4fef8e429061+8
Patches
🔴Vulnerability Details
14📋Vendor Advisories
15💬Community
1Bugzilla▶
CVE-2024-27397 kernel: netfilter: nf_tables: use timestamp to check for set element timeout↗2024-05-14