CVE-2024-40993
Published: Jul 12, 2024
Modified: May 12, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix suspicious rcu_dereference_protected() When destroying all sets, we are either in pernet exit phase or are executing a "destroy all sets command" from userspace. The latter was taken into account in ip_set_dereference() (nfnetlink mutex is held), but the former was not. The patch adds the required check to rcu_dereference_protected() in ip_set_dereference().
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected c0761d1f1ce1d5b85b5e82bbb714df12de1aa8c3 - < 3799d02ae4208af08e81310770d8754863a246a1affected 93b53c202b51a69e42ca57f5a183f7e008e19f83 - < 72d9611968867cc4c5509e7708b1507d692b797aaffected 0f1bb77c6d837c9513943bc7c08f04c5cc5c6568 - < 523bed6489e089dd8040e72453fb79da47b144c2affected 390b353d1a1da3e9c6c0fd14fe650d69063c95d6 - < 788d585e62f487bc4536d454937f737b70d39a33affected 2ba35b37f780c6410bb4bba9c3072596d8576702 - < 94dd411c18d7fff9e411555d5c662d29416501e4+2 more versions |
Linux | Linux | affected 6.1.95 - < 6.1.96affected 6.6.35 - < 6.6.36affected 6.9.6 - < 6.9.7 |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now