Vulnerability · Published May 1, 2024 · Assigned by Linux
CVE-2024-27017netfilter: nft_set_pipapo: walk over current view on netlink dump
High 7.8
In plain English
A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 77.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: walk over current view on netlink dump The generation mask can be updated while netlink dump is in progress. The pipapo set backend walk iterator cannot rely on it to infer what view of the datastructure is to be used. Add notation to specify if user wants to read/update the set. Based on patch from Florian Westphal.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | bpftool | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-abi-stablelists | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-core | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-cross-headers | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-debug | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-debug-core | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-debug-devel | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-debug-modules | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-debug-modules-extra | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-devel | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-doc | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-headers | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-modules | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-modules-extra | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-rt | 4.18.0-553.27.1.rt7.368.el8_10 | ALSA-2024:8870 |
| AlmaLinux:8 | kernel-rt-core | 4.18.0-553.27.1.rt7.368.el8_10 | ALSA-2024:8870 |
| AlmaLinux:8 | kernel-rt-debug | 4.18.0-553.27.1.rt7.368.el8_10 | ALSA-2024:8870 |
| AlmaLinux:8 | kernel-rt-debug-core | 4.18.0-553.27.1.rt7.368.el8_10 | ALSA-2024:8870 |
| AlmaLinux:8 | kernel-rt-debug-devel | 4.18.0-553.27.1.rt7.368.el8_10 | ALSA-2024:8870 |
| AlmaLinux:8 | kernel-rt-debug-modules | 4.18.0-553.27.1.rt7.368.el8_10 | ALSA-2024:8870 |
| AlmaLinux:8 | kernel-rt-debug-modules-extra | 4.18.0-553.27.1.rt7.368.el8_10 | ALSA-2024:8870 |
| AlmaLinux:8 | kernel-rt-devel | 4.18.0-553.27.1.rt7.368.el8_10 | ALSA-2024:8870 |
| AlmaLinux:8 | kernel-rt-modules | 4.18.0-553.27.1.rt7.368.el8_10 | ALSA-2024:8870 |
| AlmaLinux:8 | kernel-rt-modules-extra | 4.18.0-553.27.1.rt7.368.el8_10 | ALSA-2024:8870 |
| AlmaLinux:8 | kernel-tools | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-tools-libs | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-tools-libs-devel | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-zfcpdump | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-zfcpdump-core | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-zfcpdump-devel | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-zfcpdump-modules | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | kernel-zfcpdump-modules-extra | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | perf | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| AlmaLinux:8 | python3-perf | 4.18.0-553.27.1.el8_10 | ALSA-2024:8856 |
| Debian:12 | linux | 6.1.112-1 | DSA-5782-1 |
| Debian:12 | linux | 6.1.112-1 | DEBIAN-CVE-2024-27017 |
| Debian:13 | linux | 6.8.9-1 | DEBIAN-CVE-2024-27017 |
| Debian:14 | linux | 6.8.9-1 | DEBIAN-CVE-2024-27017 |
| Rocky Linux:8 | kernel | 0:4.18.0-553.27.1.el8_10 | RLSA-2024:8856 |
| Rocky Linux:8 | kernel-rt | 0:4.18.0-553.27.1.rt7.368.el8_10 | RLSA-2024:8870 |
| Ubuntu:22.04:LTS | linux | 5.15.0-117.127 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux | 5.15.0-117.127 | USN-6923-1 |
| Ubuntu:24.04:LTS | linux | 6.8.0-38.38 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1066.72 | USN-6923-1 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1066.72 | UBUNTU-CVE-2024-27017 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1011.12 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | 6.8.0-1011.12~22.04.1 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1070.79 | USN-6956-1 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1070.79 | UBUNTU-CVE-2024-27017 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1010.10 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | 6.8.0-1010.10~22.04.1 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1070.79.1 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1070.79.1 | USN-6956-1 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1065.73 | USN-6923-1 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1065.73 | UBUNTU-CVE-2024-27017 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1010.11 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1063.69 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1063.69 | USN-6923-1 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1006.9 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1049.56 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1049.56 | USN-6923-1 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1059.62 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1059.62 | USN-6923-2 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1008.8 | UBUNTU-CVE-2024-27017 |
| Ubuntu:24.04:LTS | linux-intel | 6.8.0-1007.14 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1061.67 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1061.67 | USN-6923-1 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1063.68 | USN-6923-1 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1063.68 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-117.127 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-117.127 | USN-6923-1 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-38.38.1 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1061.62 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1061.62 | USN-6923-1 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1009.9 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1009.9~22.04.1 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1027.27 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1015.15 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | 6.8.0-1008.8 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1064.70 | USN-6923-1 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1064.70 | UBUNTU-CVE-2024-27017 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1008.8 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1008.8~22.04.1 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1059.62 | USN-6923-2 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1059.62 | UBUNTU-CVE-2024-27017 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1007.7 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:24.04:LTS | linux-riscv | 6.8.0-38.38.1 | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2024-27017 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1035.39 | UBUNTU-CVE-2024-27017 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 2a90da8e0dd50f42e577988f4219f4f4cd3616b7 – before ff89db14c63a827066446460e39226c0688ef78645eb6944d0f55102229115de040ef3a48841434a – before ce9fef54c5ec9912a0c9a47bac3195cc41b146790d836f917520300a8725a5dbdad4406438d0cead – before 52735a010f37580b3a569a996f878fdd874256502b84e215f87443c74ac0aa7f76bb172d43a87033 – before f24d8abc2bb8cbf31ec713336e402eafa8f42f602b84e215f87443c74ac0aa7f76bb172d43a87033 – before 721715655c72640567e8742567520c99801148ed2b84e215f87443c74ac0aa7f76bb172d43a87033 – before 29b359cf6d95fd60730533f7f10464e95bd17c73f661383b5f1aaac3fe121b91e04332944bc901935.10.186 – before 5.10.227 |
| Linux | Linux | 6.4 |
References
- https://git.kernel.org/stable/c/ff89db14c63a827066446460e39226c0688ef786
- https://git.kernel.org/stable/c/ce9fef54c5ec9912a0c9a47bac3195cc41b14679
- https://git.kernel.org/stable/c/52735a010f37580b3a569a996f878fdd87425650
- https://git.kernel.org/stable/c/f24d8abc2bb8cbf31ec713336e402eafa8f42f60
- https://git.kernel.org/stable/c/721715655c72640567e8742567520c99801148ed
- https://git.kernel.org/stable/c/29b359cf6d95fd60730533f7f10464e95bd17c73
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DAMSOZXJEPUOXW33WZYWCVAY7Z5S7OOY/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCBZZEC7L7KTWWAS2NLJK6SO3IZIL4WW/