In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: disallow anonymous set with timeout flag
Anonymous sets are never used with timeout from userspace, reject this. Exception to this rule is NFTSETEVAL to ensure legacy meters still work.
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"273030523239188753453873346002432046895",
"263460325219012551988942521803720952209",
"62709497960588379146537947767370745743",
"269945574394544478458500945370445367540"
]
},
"id": "CVE-2024-26642-038463ca",
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@16603605b667b70da974bea8216c93e7db043bf1",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"273030523239188753453873346002432046895",
"263460325219012551988942521803720952209",
"62709497960588379146537947767370745743",
"269945574394544478458500945370445367540"
]
},
"id": "CVE-2024-26642-1f42d803",
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7cdc1be24cc1bcd56a3e89ac4aef20e31ad09199",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"273030523239188753453873346002432046895",
"263460325219012551988942521803720952209",
"62709497960588379146537947767370745743",
"269945574394544478458500945370445367540"
]
},
"id": "CVE-2024-26642-31ee9d60",
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72c1efe3f247a581667b7d368fff3bd9a03cd57a",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"273030523239188753453873346002432046895",
"263460325219012551988942521803720952209",
"206352281649124584220132942916618025540",
"151320794809254443557436246495385494253"
]
},
"id": "CVE-2024-26642-56253c4a",
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe40ffbca19dc70d7c6b1e3c77b9ccb404c57351",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"273030523239188753453873346002432046895",
"263460325219012551988942521803720952209",
"206352281649124584220132942916618025540",
"151320794809254443557436246495385494253"
]
},
"id": "CVE-2024-26642-6b5fac52",
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4988d8415bd0294d6f9f4a1e7095f8b50a97ca9",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"273030523239188753453873346002432046895",
"263460325219012551988942521803720952209",
"62709497960588379146537947767370745743",
"269945574394544478458500945370445367540"
]
},
"id": "CVE-2024-26642-884dfa18",
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e07c16695583a66e81f67ce4c46e94dece47ba7",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"273030523239188753453873346002432046895",
"263460325219012551988942521803720952209",
"206352281649124584220132942916618025540",
"151320794809254443557436246495385494253"
]
},
"id": "CVE-2024-26642-affbe80b",
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e9a0d3f376eb356d54ffce36e7cc37514cbfbd6f",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"273030523239188753453873346002432046895",
"263460325219012551988942521803720952209",
"62709497960588379146537947767370745743",
"269945574394544478458500945370445367540"
]
},
"id": "CVE-2024-26642-b4d393cd",
"target": {
"file": "net/netfilter/nf_tables_api.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c0c2176d1814b92ea4c8e7eb7c9cd94cd99c1b12",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
}
]