1. Home
  2. Vulnerabilities
  3. CVE-2024-27017

CVE-2024-27017

CVSS v3.1 5.5 (Medium)
55% Progress
EPSS 0.04 % (10th)
0.04% Progress
Affected Products 2
Advisories 12
NVD Status Analyzed
Info CVSS EPSS Affected Configurations References Security Advisories Packages & Software Tools, Exploits & PoC Graph Web & Social Timeline

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_pipapo: walk over current view on netlink dump

The generation mask can be updated while netlink dump is in progress.
The pipapo set backend walk iterator cannot rely on it to infer what
view of the datastructure is to be used. Add notation to specify if user
wants to read/update the set.

Based on patch from Florian Westphal.

Weaknesses
CWE-NVD-noinfo
CVE Status
PUBLISHED
NVD Status
Analyzed
CNA
kernel.org
Published Date
2024-05-01 06:15:20
(4 months ago)
Updated Date
2024-05-23 19:36:40
(3 months ago)

Affected Products

Fedoraproject

Linux

Configuration #1

    CPE23 From Up To
  Linux Kernel from 6.4 version and prior 6.8.8 version cpe:2.3:o:linux:linux_kernel >= 6.4 < 6.8.8
  Linux Kernel 6.9 Rc1 cpe:2.3:o:linux:linux_kernel:6.9:rc1
  Linux Kernel 6.9 Rc2 cpe:2.3:o:linux:linux_kernel:6.9:rc2
  Linux Kernel 6.9 Rc3 cpe:2.3:o:linux:linux_kernel:6.9:rc3
  Linux Kernel 6.9 Rc4 cpe:2.3:o:linux:linux_kernel:6.9:rc4

Configuration #2

    CPE23 From Up To
  Fedoraproject Fedora 38 cpe:2.3:o:fedoraproject:fedora:38
  Fedoraproject Fedora 39 cpe:2.3:o:fedoraproject:fedora:39
  Fedoraproject Fedora 40 cpe:2.3:o:fedoraproject:fedora:40