NetSight
IP …
high7.8

CVE-2024-26809

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: release elements in clone only from destroy path Clone already a…

Impact

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: release elements in clone only from destroy path Clone already always provides a current view of the lookup table, use it to destroy the set, otherwise it is possible to destroy elements twice. This fix requires: 212ed75dc5fb ("netfilter: nf_tables: integrate pipapo into commit protocol") which came after: 9827a0e6e23b ("netfilter: nft_set_pipapo: release elements in clone from abort path").

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.10.130 before 5.10.214
from 5.15.54 before 5.15.153
from 5.18.11 before 6.1.83
from 6.2 before 6.6.23
from 6.7 before 6.7.11
from 6.8 before 6.8.2
DebianDebian Linux
Version 10.0

References