CVE-2024-40993
published 2024-07-12CVE-2024-40993: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix suspicious rcu_dereference_protected() When destroying all sets, we…
PriorityP421medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.28%
20.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: Fix suspicious rcu_dereference_protected()
When destroying all sets, we are either in pernet exit phase or
are executing a "destroy all sets command" from userspace. The latter
was taken into account in ip_set_dereference() (nfnetlink mutex is held),
but the former was not. The patch adds the required check to
rcu_dereference_protected() in ip_set_dereference().
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.99-1 (bookworm) | linux 6.1.99-1 (bookworm) |
| debian | linux-6.1 | < linux 6.1.99-1 (bookworm) | linux 6.1.99-1 (bookworm) |
| linux | linux | >= 0f1bb77c6d837c9513943bc7c08f04c5cc5c6568 < 523bed6489e089dd8040e72453fb79da47b144c2 | 523bed6489e089dd8040e72453fb79da47b144c2 |
| linux | linux | >= 2ba35b37f780c6410bb4bba9c3072596d8576702 < 94dd411c18d7fff9e411555d5c662d29416501e4 | 94dd411c18d7fff9e411555d5c662d29416501e4 |
| linux | linux | >= 390b353d1a1da3e9c6c0fd14fe650d69063c95d6 < 788d585e62f487bc4536d454937f737b70d39a33 | 788d585e62f487bc4536d454937f737b70d39a33 |
| linux | linux | >= 4e7aaa6b82d63e8ddcbfb56b4fd3d014ca586f10 < 8ecd06277a7664f4ef018abae3abd3451d64e7a6 | 8ecd06277a7664f4ef018abae3abd3451d64e7a6 |
| linux | linux | >= 6.1.95 < 6.1.96 | 6.1.96 |
| linux | linux | >= 6.6.35 < 6.6.36 | 6.6.36 |
| linux | linux | >= 6.9.6 < 6.9.7 | 6.9.7 |
| linux | linux | >= 90ae20d47de602198eb69e6cd7a3db3420abfc08 < 3fc09e1ca854bc234e007a56e0f7431f5e2defb5 | 3fc09e1ca854bc234e007a56e0f7431f5e2defb5 |
| linux | linux | >= 93b53c202b51a69e42ca57f5a183f7e008e19f83 < 72d9611968867cc4c5509e7708b1507d692b797a | 72d9611968867cc4c5509e7708b1507d692b797a |
| linux | linux | >= c0761d1f1ce1d5b85b5e82bbb714df12de1aa8c3 < 3799d02ae4208af08e81310770d8754863a246a1 | 3799d02ae4208af08e81310770d8754863a246a1 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.221-1 | 5.10.221-1 |
| linux | linux_kernel | >= 0 < 6.1.99-1 | 6.1.99-1 |
| linux | linux_kernel | >= 0 < 6.9.7-1 | 6.9.7-1 |
| linux | linux_kernel | >= 0 < 6.9.7-1 | 6.9.7-1 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-66vv-cf65-88qw: In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: Fix suspicious rcu_dereference_protected()
When destroying all
ghsa_unreviewed·2024-07-12
CVE-2024-40993 [MEDIUM] GHSA-66vv-cf65-88qw: In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: Fix suspicious rcu_dereference_protected()
When destroying all
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: Fix suspicious rcu_dereference_protected()
When destroying all sets, we are either in pernet exit phase or
are executing a "destroy all sets command" from userspace. The latter
was taken into account in ip_set_dereference() (nfnetlink mutex is held),
but the former was not. The patch adds the required check to
rcu_dereference_protected() in ip_set_dereference().
OSV
CVE-2024-40993: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix suspicious rcu_dereference_protected() When destroying all s
osv·2024-07-12·CVSS 5.5
CVE-2024-40993 [MEDIUM] CVE-2024-40993: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix suspicious rcu_dereference_protected() When destroying all s
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix suspicious rcu_dereference_protected() When destroying all sets, we are either in pernet exit phase or are executing a "destroy all sets command" from userspace. The latter was taken into account in ip_set_dereference() (nfnetlink mutex is held), but the former was not. The patch adds the required check to rcu_dereference_protected() in ip_set_dereference().
Red Hat
kernel: netfilter: ipset: Fix suspicious rcu_dereference_protected()
vendor_redhat·2024-07-12·CVSS 5.5
CVE-2024-40993 [MEDIUM] CWE-99 kernel: netfilter: ipset: Fix suspicious rcu_dereference_protected()
kernel: netfilter: ipset: Fix suspicious rcu_dereference_protected()
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: Fix suspicious rcu_dereference_protected()
When destroying all sets, we are either in pernet exit phase or
are executing a "destroy all sets command" from userspace. The latter
was taken into account in ip_set_dereference() (nfnetlink mutex is held),
but the former was not. The patch adds the required check to
rcu_dereference_protected() in ip_set_dereference().
A suspicious rcu_dereference_protected() was observed in netfilter in the Linux kernel. This may lead to a loss of Availability.
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Out of support scope
Package: k
Debian
CVE-2024-40993: linux - In the Linux kernel, the following vulnerability has been resolved: netfilter: ...
vendor_debian·2024·CVSS 5.5
CVE-2024-40993 [MEDIUM] CVE-2024-40993: linux - In the Linux kernel, the following vulnerability has been resolved: netfilter: ...
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix suspicious rcu_dereference_protected() When destroying all sets, we are either in pernet exit phase or are executing a "destroy all sets command" from userspace. The latter was taken into account in ip_set_dereference() (nfnetlink mutex is held), but the former was not. The patch adds the required check to rcu_dereference_protected() in ip_set_dereference().
Scope: local
bookworm: resolved (fixed in 6.1.99-1)
bullseye: resolved (fixed in 5.10.221-1)
forky: resolved (fixed in 6.9.7-1)
sid: resolved (fixed in 6.9.7-1)
trixie: resolved (fixed in 6.9.7-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/3799d02ae4208af08e81310770d8754863a246a1https://git.kernel.org/stable/c/3fc09e1ca854bc234e007a56e0f7431f5e2defb5https://git.kernel.org/stable/c/523bed6489e089dd8040e72453fb79da47b144c2https://git.kernel.org/stable/c/72d9611968867cc4c5509e7708b1507d692b797ahttps://git.kernel.org/stable/c/788d585e62f487bc4536d454937f737b70d39a33https://git.kernel.org/stable/c/8ecd06277a7664f4ef018abae3abd3451d64e7a6https://git.kernel.org/stable/c/94dd411c18d7fff9e411555d5c662d29416501e4https://git.kernel.org/stable/c/3799d02ae4208af08e81310770d8754863a246a1https://git.kernel.org/stable/c/3fc09e1ca854bc234e007a56e0f7431f5e2defb5https://git.kernel.org/stable/c/523bed6489e089dd8040e72453fb79da47b144c2https://git.kernel.org/stable/c/72d9611968867cc4c5509e7708b1507d692b797ahttps://git.kernel.org/stable/c/788d585e62f487bc4536d454937f737b70d39a33https://git.kernel.org/stable/c/8ecd06277a7664f4ef018abae3abd3451d64e7a6https://git.kernel.org/stable/c/94dd411c18d7fff9e411555d5c662d29416501e4https://lists.debian.org/debian-lts-announce/2025/01/msg00001.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-265688.html
2024-07-12
Published