7.0 Élevée

CVE-2024-35898 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in…

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() nft_unregister_flowtable_type() within nf_flow_inet_module_exit() can concurrent with __nft_flowtable_type_get() within nf_tables_newflowtable(). And thhere is not any protection when iterate over nf_tables_flowtables list in __nft_flowtable_type_get(). Therefore, there is pertential data-race of nf_tables_flowtables list entry. Use list_for_each_entry_rcu() to iterate over nf_tables_flowtables list in __nft_flowtable_type_get(), and use rcu_read_lock() in the caller nft_flowtable_type_get() to protect the entire type query process.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Linux 6.9	premières → < 6.9	6.9
Linux 6.8	premières → < 6.8.5	6.8.5
Linux 6.6	premières → < 6.6.26	6.6.26
Linux 6.1	premières → < 6.1.85	6.1.85
Linux 5.15	premières → < 5.15.154	5.15.154
Linux 5.10	premières → < 5.10.215	5.10.215
Linux 5.4	premières → < 5.4.274	5.4.274
Linux 4.19	premières → < 4.19.312	4.19.312
Linux	4.16	Pas de correctif indiqué