CVE-2024-27065

netfilter: nf_tables: do not compare internal table flags on updates

Severity Score

4.7

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: do not compare internal table flags on updates

Restore skipping transaction if table update does not modify flags.

En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: netfilter: nf_tables: no comparar indicadores de tablas internas en las actualizaciones Restaurar la transacción omitida si la actualización de la tabla no modifica los indicadores.

*Credits: N/A

CVSS Scores

Red Hatv3.1 4.7

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2024-02-19 CVE Reserved
2024-05-01 CVE Published
2024-05-02 EPSS Updated
2024-08-02 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (15)

URL	Tag	Source
https://git.kernel.org/stable/c/e10f661adc556c4969c70ddaddf238bffdaf1e87	Vuln. Introduced
https://git.kernel.org/stable/c/d9c4da8cb74e8ee6e58a064a3573aa37acf6c935	Vuln. Introduced
https://git.kernel.org/stable/c/179d9ba5559a756f4322583388b3213fe4e391b0	Vuln. Introduced
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html

URL	Date	SRC

URL	Date	SRC
https://git.kernel.org/stable/c/2531f907d3e40a6173090f10670ae76d117ab27b	2024-03-26
https://git.kernel.org/stable/c/fcf32a5bfcb8a57ac0ce717fcfa4d688c91f1005	2024-03-26
https://git.kernel.org/stable/c/640dbf688ba955e83e03de84fbdda8e570b7cce4	2024-03-26
https://git.kernel.org/stable/c/9683cb6c2c6c0f45537bf0b8868b5d38fcb63fc7	2024-03-26
https://git.kernel.org/stable/c/4d37f12707ee965d338028732575f0b85f6d9e4f	2024-03-26
https://git.kernel.org/stable/c/3443e57654f90c9a843ab6a6040c10709fd033aa	2024-03-26
https://git.kernel.org/stable/c/df257c435e51651c43b86326d112ddadda76350e	2024-03-26
https://git.kernel.org/stable/c/4a0e7f2decbf9bd72461226f1f5f7dcc4b08f139	2024-03-20
https://git.kernel.org/stable/c/845083249d6a392f3a88804e1669bdb936ee129f	2024-06-16

URL	Date	SRC
https://access.redhat.com/security/cve/CVE-2024-27065	2024-08-15
https://bugzilla.redhat.com/show_bug.cgi?id=2278380	2024-08-15

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.4.262 < 5.4.273 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.4.262 < 5.4.273"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.10.202 < 5.10.214 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.10.202 < 5.10.214"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.13 < 5.15.153 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.13 < 5.15.153"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.13 < 6.1.83 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.13 < 6.1.83"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.13 < 6.6.23 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.13 < 6.6.23"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.13 < 6.7.11 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.13 < 6.7.11"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.13 < 6.8.2 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.13 < 6.8.2"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.13 < 6.9 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.13 < 6.9"		en		Affected