Vulnerability · Published Feb 20, 2024 · Assigned by Linux
CVE-2024-26581netfilter: nft_set_rbtree: skip end interval element from gc
High 7.8
In plain English
A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.2% (higher than 83% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)2.2%top 17.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC
Official description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval elements that are not yet active.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | bpftool | 7.3.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-64k | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-64k-core | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-64k-debug | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-64k-debug-core | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-64k-debug-devel | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-64k-debug-devel-matched | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-64k-debug-modules | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-64k-debug-modules-core | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-64k-debug-modules-extra | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-64k-devel | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-64k-devel-matched | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-64k-modules | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-64k-modules-core | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-64k-modules-extra | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-abi-stablelists | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-core | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-cross-headers | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-debug | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-debug-core | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-debug-devel | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-debug-devel-matched | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-debug-modules | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-debug-modules-core | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-debug-modules-extra | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-debug-uki-virt | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-devel | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-devel-matched | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-doc | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-headers | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-modules | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-modules-core | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-modules-extra | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-rt | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-rt-core | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-rt-debug | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-rt-debug-core | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-rt-debug-devel | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-rt-debug-modules | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-rt-debug-modules-core | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-rt-devel | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-rt-modules | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-rt-modules-core | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-rt-modules-extra | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-tools | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-tools-libs | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-tools-libs-devel | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-uki-virt | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-zfcpdump | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-zfcpdump-core | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-zfcpdump-modules-core | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | libperf | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | perf | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | python3-perf | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | rtla | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| AlmaLinux:9 | rv | 5.14.0-427.33.1.el9_4 | ALSA-2024:5928 |
| Debian:12 | linux | 6.1.82-1 | DEBIAN-CVE-2024-26581 |
| Debian:13 | linux | 6.7.7-1 | DEBIAN-CVE-2024-26581 |
| Debian:14 | linux | 6.7.7-1 | DEBIAN-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux | 5.15.0-105.115 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux | 5.15.0-105.115 | USN-6742-1 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1060.66 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1060.66 | USN-6742-1 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | 6.5.0-1018.18~22.04.1 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | 6.5.0-1018.18~22.04.1 | USN-6743-1 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1061.70 | USN-6742-2 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1061.70 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | 6.5.0-1019.20~22.04.1 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | 6.5.0-1019.20~22.04.1 | USN-6743-3 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1061.70.1 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1061.70.1 | USN-6742-1 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1058.66 | USN-6742-1 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1058.66 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | 6.5.0-1018.18~22.04.1 | USN-6743-1 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | 6.5.0-1018.18~22.04.1 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1057.62 | USN-6742-1 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1057.62 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1043.50 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1043.50 | USN-6742-1 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | 6.5.0-28.29~22.04.1 | USN-6743-1 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | 6.5.0-28.29~22.04.1 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1053.56 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1053.56 | USN-6742-1 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1055.61 | USN-6742-1 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1055.61 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1057.62 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1057.62 | USN-6742-1 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-105.115 | USN-6742-2 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-105.115 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | 6.5.0-28.29.1~22.04.1 | USN-6743-2 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | 6.5.0-28.29.1~22.04.1 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1053.54 | USN-6742-2 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1053.54 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | 6.5.0-1015.15 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | 6.5.0-1015.15 | USN-6743-1 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1025.25 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1012.12 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | 6.1.0-1035.35 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | 6.1.0-1035.35 | USN-6688-1 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | 6.5.0-1020.21 | USN-6743-1 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | 6.5.0-1020.21 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1058.64 | USN-6742-1 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1058.64 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | 6.5.0-1021.21~22.04.1 | USN-6743-1 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | 6.5.0-1021.21~22.04.1 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1053.56 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1053.56 | USN-6742-1 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | 6.5.0-28.29.1~22.04.1 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | 6.5.0-1012.13~22.04.1 | USN-6743-1 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | 6.5.0-1012.13~22.04.1 | UBUNTU-CVE-2024-26581 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1030.34 | UBUNTU-CVE-2024-26581 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 8284a79136c384059e85e278da2210b809730287 – before c60d252949caf9aba537525195edae6bbabc35ebacaee227cf79c45a5d2d49c3e9a66333a462802c – before 10e9cb39313627f2eae4cd70c4b742074e998fd8893cb3c3513cf661a0ff45fe0cfa83fe27131f76 – before 4cee42fcf54fec46b344681e7cc4f234bb22f85a50cbb9d195c197af671869c8cadce3bd483735a0 – before 2bab493a5624444ec6e648ad0d55a362bcb4c00389a4d1a89751a0fbd520e64091873e19cc0979e8 – before 1296c110c5a0b45a8fcf58e7d18bc5da61a565cbf718863aca469a109895cb855e6b81fff4827d71 – before b734f7a47aeb32a5ba298e4ccc16bb0c52b6dbf7f718863aca469a109895cb855e6b81fff4827d71 – before 6eb14441f10602fa1cf691da9d685718b68b78a9f718863aca469a109895cb855e6b81fff4827d71 – before 60c0c230c6f046da536d3df8b39a20b9a9fd6af0 |
| Linux | Linux | 6.5 |
References
- https://git.kernel.org/stable/c/c60d252949caf9aba537525195edae6bbabc35eb
- https://git.kernel.org/stable/c/10e9cb39313627f2eae4cd70c4b742074e998fd8
- https://git.kernel.org/stable/c/4cee42fcf54fec46b344681e7cc4f234bb22f85a
- https://git.kernel.org/stable/c/2bab493a5624444ec6e648ad0d55a362bcb4c003
- https://git.kernel.org/stable/c/1296c110c5a0b45a8fcf58e7d18bc5da61a565cb
- https://git.kernel.org/stable/c/b734f7a47aeb32a5ba298e4ccc16bb0c52b6dbf7
- https://git.kernel.org/stable/c/6eb14441f10602fa1cf691da9d685718b68b78a9
- https://git.kernel.org/stable/c/60c0c230c6f046da536d3df8b39a20b9a9fd6af0
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html x_transferred