7.8
High
CVE-2024-26925 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release mutex after…
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path The commit mutex should not be released during the critical section between nft_gc_seq_begin() and nft_gc_seq_end(), otherwise, async GC worker could collect expired objects and get the released commit lock within the same GC sequence. nf_tables_module_autoload() temporarily releases the mutex to load module dependencies, then it goes back to replay the transaction again. Move it at the end of the abort phase after nft_gc_seq_end() is called.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux 6.9 | earliest → < 6.9 | 6.9 |
| Linux 6.8 | earliest → < 6.8.5 | 6.8.5 |
| Linux 6.6 | earliest → < 6.6.26 | 6.6.26 |
| Linux | 6.5 | No fix stated |
| Linux 6.1 | earliest → < 6.1.86 | 6.1.86 |
| Linux 5.15 | earliest → < 5.15.155 | 5.15.155 |
| Linux 5.10 | earliest → < 5.10.215 | 5.10.215 |
| Linux 5.4 | earliest → < 5.4.274 | 5.4.274 |
| RUGGEDCOM RM1224 LTE(4G) EU 8.2 | earliest → < 8.2 | 8.2 |
Show the 24 other branches Hide the 24 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| RUGGEDCOM RM1224 LTE(4G) NAM 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE M804PB 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE M812-1 ADSL-Router 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE M816-1 ADSL-Router 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE M826-2 SHDSL-Router 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE M874-2 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE M874-3 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE M874-3 3G-Router (CN) 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE M876-3 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE M876-3 (ROK) 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE M876-4 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE M876-4 (EU) 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE M876-4 (NAM) 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE MUM853-1 (A1) 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE MUM853-1 (B1) 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE MUM853-1 (EU) 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE MUM856-1 (A1) 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE MUM856-1 (B1) 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE MUM856-1 (CN) 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE MUM856-1 (EU) 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE MUM856-1 (RoW) 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE S615 EEC LAN-Router 8.2 | earliest → < 8.2 | 8.2 |
| SCALANCE S615 LAN-Router 8.2 | earliest → < 8.2 | 8.2 |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | earliest → < 1.1.1 | 1.1.1 |
References
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
Timeline
- Published
- Last modified
Other CVEs of Linux
The 18283 CVEs of Linux →
CVE-2026-99270
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix potential UAF in reqsk_timer_handler()
8.1
High
CVE-2026-99269
In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before…
7.8
High
CVE-2026-99261
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for…
Not rated
CVE-2026-99260
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags…
Not rated