In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: set dormant flag on hook register failure We need to set the dormant flag again if we fail to register the hooks. During memory pressure hook registration can fail and we end up with a table marked as active but no registered hooks. On table/base chain deletion, nf_tables will attempt to unregister the hook again which yields a warn splat from the nftables core.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Redhat
  • Enterprise Linux

No data.

Package CPE Advisory Released Date
Red Hat Enterprise Linux 9
kernel-0:5.14.0-503.11.1.el9_5 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
kernel-0:5.14.0-503.11.1.el9_5 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/0c9302a6da262e6ab6a6c1d30f04a6130ed97376 cve-icon cve-icon
https://git.kernel.org/stable/c/31ea574aeca1aa488e18716459bde057217637af cve-icon cve-icon
https://git.kernel.org/stable/c/664264a5c55bf97a9c571c557d477b75416199be cve-icon cve-icon
https://git.kernel.org/stable/c/6f2496366426cec18ba53f1c7f6c3ac307ca6a95 cve-icon cve-icon
https://git.kernel.org/stable/c/a6411f3c48f991c19aaf9a24fce36865fbba28d7 cve-icon cve-icon
https://git.kernel.org/stable/c/ae4360cbd385f0d7a8a86d5723e50448cc6318f3 cve-icon cve-icon
https://git.kernel.org/stable/c/bccebf64701735533c8db37773eeacc6566cc8ec cve-icon cve-icon
https://git.kernel.org/stable/c/f2135bbf14949687e96cabb13d8a91ae3deb9069 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024041714-CVE-2024-26835-083d@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-26835 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-26835 cve-icon
History

Fri, 22 Nov 2024 12:00:00 +0000

Type Values Removed Values Added
References

Wed, 13 Nov 2024 02:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux

Wed, 06 Nov 2024 08:15:00 +0000

Type Values Removed Values Added
References
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 12 Sep 2024 08:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-04-17T10:10:02.907Z

Updated: 2024-11-05T09:16:39.561Z

Reserved: 2024-02-19T14:20:24.181Z

Link: CVE-2024-26835

cve-icon Vulnrichment

Updated: 2024-08-02T00:14:13.604Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-04-17T10:15:09.667

Modified: 2024-11-21T09:03:10.480

Link: CVE-2024-26835

cve-icon Redhat

Severity : Low

Publid Date: 2024-04-17T00:00:00Z

Links: CVE-2024-26835 - Bugzilla