In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: Fix potential data-race in _nftexprtypeget()
nftunregisterexpr() can concurrent with __nftexprtype_get(), and there is not any protection when iterate over nftablesexpressions list in _nftexprtypeget(). Therefore, there is potential data-race of nftablesexpressions list entry.
Use listforeachentryrcu() to iterate over nftablesexpressions list in __nftexprtypeget(), and use rcureadlock() in the caller nftexprtypeget() to protect the entire type query process.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27020.json"
}