< Back

CVE-2024-26581

Updated on 20 Feb 2024

Severity

7.8 High severity

Details

CVSS score
7.8
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_rbtree: skip end interval element from gc

rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval elements that are not yet active.

Details

Affected product:
AlmaLinux 9.2 ESU , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , Debian 10 ELS , Oracle Linux 6 ELS , Oracle Linux 7 ELS , TuxCare 9.6 ESU , TuxCare 9.8 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS
Affected packages:
linux @ 4.4.0 (+15 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
AlmaLinux 9 Released
11 kernels
  • 5.14.0-362.24.1.el9_3
  • 5.14.0-362.24.2.el9_3
  • 5.14.0-427.13.1.el9_4
  • 5.14.0-427.16.1.el9_4
  • 5.14.0-427.18.1.el9_4
  • 5.14.0-427.20.1.el9_4
  • 5.14.0-427.22.1.el9_4
  • 5.14.0-427.24.1.el9_4
  • 5.14.0-427.26.1.el9_4
  • 5.14.0-427.28.1.el9_4
  • 5.14.0-427.31.1.el9_4
Amazon Linux 2023 Will Not Fix —
Amazon Linux 2 5.10 Will Not Fix —
Amazon Linux 2 5.4 Released
4 kernels
  • 5.4.265-176.364.amzn2
  • 5.4.266-178.365.amzn2
  • 5.4.268-181.368.amzn2
  • 5.4.268-181.370.amzn2
Debian 11 Released
5 kernels
  • 5.10.191-1
  • 5.10.197-1
  • 5.10.205-1
  • 5.10.205-2
  • 5.10.209-2
Debian 11 cloud Released
4 kernels
  • 5.10.191-1
  • 5.10.197-1
  • 5.10.205-2
  • 5.10.209-2
Debian 12 Planned —
Oracle Linux 9 Released
12 kernels
  • 5.14.0-362.24.1.0.1.el9_3
  • 5.14.0-362.24.1.0.2.el9_3
  • 5.14.0-362.24.1.el9_3
  • 5.14.0-427.13.1.el9_4
  • 5.14.0-427.16.1.el9_4
  • 5.14.0-427.18.1.el9_4
  • 5.14.0-427.20.1.el9_4
  • 5.14.0-427.22.1.el9_4
  • 5.14.0-427.24.1.el9_4
  • 5.14.0-427.26.1.el9_4
  • 5.14.0-427.28.1.el9_4
  • 5.14.0-427.31.1.el9_4
Proxmox VE 7 5.15 Released
2 kernels
  • 5.15.136-1-pve-5.15.136-1
  • 5.15.143-1-pve-5.15.143-1
RHEL 9 Released
10 kernels
  • 5.14.0-362.24.1.el9_3
  • 5.14.0-427.13.1.el9_4
  • 5.14.0-427.16.1.el9_4
  • 5.14.0-427.18.1.el9_4
  • 5.14.0-427.20.1.el9_4
  • 5.14.0-427.22.1.el9_4
  • 5.14.0-427.24.1.el9_4
  • 5.14.0-427.26.1.el9_4
  • 5.14.0-427.28.1.el9_4
  • 5.14.0-427.31.1.el9_4
Rocky Linux 9 Released
12 kernels
  • 5.14.0-362.24.1.el9_3.0.1
  • 5.14.0-362.24.1.el9_3
  • 5.14.0-427.16.1.el9_4
  • 5.14.0-427.18.1.el9_4
  • 5.14.0-427.20.1.el9_4.0.1
  • 5.14.0-427.20.1.el9_4
  • 5.14.0-427.22.1.el9_4
  • 5.14.0-427.24.1.el9_4
  • 5.14.0-427.26.1.el9_4
  • 5.14.0-427.28.1.el9_4
  • 5.14.0-427.31.1.el9_4
  • 5.14.0-427.13.1.el9_4
Ubuntu 20.04 Released
2 kernels
  • 5.4.0-174.193
  • 5.4.0-176.196
Ubuntu 20.04 AWS Released
2 kernels
  • 5.4.0-1121.131
  • 5.4.0-1122.132
Ubuntu 20.04 Azure Released
2 kernels
  • 5.4.0-1126.133
  • 5.4.0-1127.134
Ubuntu 20.04 GCP Released
2 kernels
  • 5.4.0-1125.134
  • 5.4.0-1126.135
Ubuntu 20.04 HWE AWS Released
4 kernels
  • 5.15.0-1053.58~20.04.1
  • 5.15.0-1055.60~20.04.1
  • 5.15.0-1056.61~20.04.1
  • 5.15.0-1057.63~20.04.1
Ubuntu 20.04 HWE Azure Released
5 kernels
  • 5.15.0-1056.64~20.04.1
  • 5.15.0-1057.65~20.04.1
  • 5.15.0-1058.66~20.04.2
  • 5.15.0-1059.67~20.04.1
  • 5.15.0-1060.69~20.04.1
Ubuntu 22.04 Released
5 kernels
  • 5.15.0-100.110
  • 5.15.0-101.111
  • 5.15.0-102.112
  • 5.15.0-94.104
  • 5.15.0-97.107
Ubuntu 22.04 AWS Released
4 kernels
  • 5.15.0-1053.58
  • 5.15.0-1055.60
  • 5.15.0-1056.61
  • 5.15.0-1057.63
Ubuntu 22.04 Azure Released
5 kernels
  • 5.15.0-1056.64
  • 5.15.0-1057.65
  • 5.15.0-1058.66
  • 5.15.0-1059.67
  • 5.15.0-1060.69