Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-27020
HistoryMay 01, 2024 - 12:00 a.m.

CVE-2024-27020

2024-05-0100:00:00
ubuntu.com
ubuntu.com
2
linux
kernel
vulnerability
netfilter
nf_tables
data race
rcu_read_lock

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
nft_unregister_expr() can concurrent with __nft_expr_type_get(), and there
is not any protection when iterate over nf_tables_expressions list in
__nft_expr_type_get(). Therefore, there is potential data-race of
nf_tables_expressions list entry. Use list_for_each_entry_rcu() to iterate
over nf_tables_expressions list in __nft_expr_type_get(), and use
rcu_read_lock() in the caller nft_expr_type_get() to protect the entire
type query process.

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%