VDB

CVE-2024-26835

CVE-2024-26835 PUBLISHED

netfilter: nf_tables: set dormant flag on hook register failure

Reported by linux · Published April 17, 2024

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: set dormant flag on hook register failure We need to set the dormant flag again if we fail to register the hooks. During memory pressure hook registration can fail and we end up with a table marked as active but no registered hooks. On table/base chain deletion, nf_tables will attempt to unregister the hook again which yields a warn splat from the nftables core.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
bpftoolAmazon Linux6.1.82-99.168.amzn2023
kernel-tools-develAmazon Linux6.1.82-99.168.amzn2023
kernel-libbpf-develAmazon Linux6.1.82-99.168.amzn2023
kernel-modules-extra-commonAmazon Linux6.1.82-99.168.amzn2023
kernel-modules-extraAmazon Linux6.1.82-99.168.amzn2023
SIMATIC S7-1500 CPU 1518-4 PN/DP MFPSiemens3.1.5
linux_kernellinux6.7.7, 6.6.19, 6.1.80, 5.15.150, 5.10.211, 5.4.270
LinuxLinuxf2135bbf14949687e96cabb13d8a91ae3deb9069, bccebf64701735533c8db37773eeacc6566cc8ec, ae4360cbd385f0d7a8a86d5723e50448cc6318f3, a6411f3c48f991c19aaf9a24fce36865fbba28d7, 6f2496366426cec18ba53f1c7f6c3ac307ca6a95, 5.13, 31ea574aeca1aa488e18716459bde057217637af, 0c9302a6da262e6ab6a6c1d30f04a6130ed97376

Affected products

VendorProductVersions
LinuxLinuxbf8083bbf8fa202e6e5316bbd99759ab82bfe7a3, e10f661adc556c4969c70ddaddf238bffdaf1e87, d9c4da8cb74e8ee6e58a064a3573aa37acf6c935
LinuxLinux5.13, 0, 5.4.270
amazon:2023bpftool0
SiemensRUGGEDCOM RST2428P0
amazon:2023kernel-tools-devel0
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP3.1.0
amazon:2023kernel-libbpf-devel0
amazon:2023kernel-modules-extra-common0
amazon:2023kernel-modules-extra0
SiemensSCALANCE XCM-/XRM-/XCH-/XRH-300 family0
LinuxLinux5.10.202, *, *
linuxlinux_kernel5.10.202, 5.13, 5.4.262
amazon:2023kernel-headers0
amazon:2023kernel-devel0
amazon:2023python3-perf0
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP3.1.0
amazon:2023kernel-tools0
amazon:2023kernel-libbpf0
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP3.1.0
SiemensSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family0

…and 4 more

Timeline

  • Apr 1, 2024 CVE Published
  • Apr 18, 2024 EPSS Score (30 in total, the first dated here)
  • Oct 4, 2024 Coalition ESS Score (13 in total, the first dated here)
  • Dec 16, 2025 PoC Published
  • Jan 15, 2026 Security Advisory (249 in total, the first dated here)
  • Mar 30, 2026 Distribution Patch (192 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2024-26835
vulnetix vdb fixes CVE-2024-26835

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-26835/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›