In the Linux kernel, the following vulnerability has been resolved:
netfilter: nftables: release mutex after nftgcseqend from abort path
The commit mutex should not be released during the critical section between nftgcseqbegin() and nftgcseqend(), otherwise, async GC worker could collect expired objects and get the released commit lock within the same GC sequence.
nftablesmoduleautoload() temporarily releases the mutex to load module dependencies, then it goes back to replay the transaction again. Move it at the end of the abort phase after nftgcseqend() is called.
[
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-26925-09d9b139",
"digest": {
"function_hash": "114763161776045107813801477222499810677",
"length": 327.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a34ba4bdeec0c3b629160497594908dc820110f1",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "nf_tables_abort"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-26925-0a4bddf7",
"digest": {
"function_hash": "114763161776045107813801477222499810677",
"length": 327.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d459e2ffb541841714839e8228b845458ed3b27",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "nf_tables_abort"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-26925-194bd87b",
"digest": {
"function_hash": "26365532400486133409826251956925472160",
"length": 4622.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eb769ff4e281f751adcaf4f4445cbf30817be139",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "__nf_tables_abort"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2024-26925-2391c92d",
"digest": {
"line_hashes": [
"84345622763067794508652377326428417408",
"298842848955414094869198051441990877374",
"517334957051159777256904848176696124",
"280922175381616877862468366288413015449",
"329860757054081954995668987108106027827",
"152593464202573372622609636587151396481",
"157578658809349996958742546620968571368",
"72581276338793776739778802060114213740",
"240426111261100419214366501826361834228",
"54798474586704981262661179050849834062"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d459e2ffb541841714839e8228b845458ed3b27",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-26925-33551ce2",
"digest": {
"function_hash": "3951112963771844471679184521463347311",
"length": 3673.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@61ac7284346c32f9a8c8ceac56102f7914060428",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "__nf_tables_abort"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2024-26925-3a9b67d4",
"digest": {
"line_hashes": [
"84345622763067794508652377326428417408",
"298842848955414094869198051441990877374",
"517334957051159777256904848176696124",
"280922175381616877862468366288413015449",
"329860757054081954995668987108106027827",
"152593464202573372622609636587151396481",
"157578658809349996958742546620968571368",
"72581276338793776739778802060114213740",
"240426111261100419214366501826361834228",
"54798474586704981262661179050849834062"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8038ee3c3e5b59bcd78467686db5270c68544e30",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2024-26925-4b6e8889",
"digest": {
"line_hashes": [
"84345622763067794508652377326428417408",
"298842848955414094869198051441990877374",
"517334957051159777256904848176696124",
"280922175381616877862468366288413015449",
"329860757054081954995668987108106027827",
"152593464202573372622609636587151396481",
"157578658809349996958742546620968571368",
"72581276338793776739778802060114213740",
"240426111261100419214366501826361834228",
"54798474586704981262661179050849834062"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@61ac7284346c32f9a8c8ceac56102f7914060428",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-26925-5edd9315",
"digest": {
"function_hash": "20410225176887346155066127163481894849",
"length": 5040.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8038ee3c3e5b59bcd78467686db5270c68544e30",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "__nf_tables_abort"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-26925-63a14da8",
"digest": {
"function_hash": "174488063237897090148763452355510576851",
"length": 346.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2cee2ff7f8cce12a63a0a23ffe27f08d99541494",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "nf_tables_abort"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-26925-7a87bcc1",
"digest": {
"function_hash": "174488063237897090148763452355510576851",
"length": 346.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@61ac7284346c32f9a8c8ceac56102f7914060428",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "nf_tables_abort"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-26925-8d0003b0",
"digest": {
"function_hash": "114763161776045107813801477222499810677",
"length": 327.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8d3a58af50e46167b6f1db47adadad03c0045dae",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "nf_tables_abort"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2024-26925-91ec870d",
"digest": {
"line_hashes": [
"84345622763067794508652377326428417408",
"298842848955414094869198051441990877374",
"517334957051159777256904848176696124",
"280922175381616877862468366288413015449",
"329860757054081954995668987108106027827",
"152593464202573372622609636587151396481",
"157578658809349996958742546620968571368",
"72581276338793776739778802060114213740",
"240426111261100419214366501826361834228",
"54798474586704981262661179050849834062"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2cee2ff7f8cce12a63a0a23ffe27f08d99541494",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2024-26925-957e8b32",
"digest": {
"line_hashes": [
"84345622763067794508652377326428417408",
"298842848955414094869198051441990877374",
"517334957051159777256904848176696124",
"280922175381616877862468366288413015449",
"329860757054081954995668987108106027827",
"152593464202573372622609636587151396481",
"157578658809349996958742546620968571368",
"72581276338793776739778802060114213740",
"240426111261100419214366501826361834228",
"54798474586704981262661179050849834062"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8d3a58af50e46167b6f1db47adadad03c0045dae",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-26925-ac1fbfad",
"digest": {
"function_hash": "26365532400486133409826251956925472160",
"length": 4622.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8d3a58af50e46167b6f1db47adadad03c0045dae",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "__nf_tables_abort"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-26925-ad74b77e",
"digest": {
"function_hash": "34122733878151106226767321505080697177",
"length": 5055.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a34ba4bdeec0c3b629160497594908dc820110f1",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "__nf_tables_abort"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2024-26925-c0e93ad7",
"digest": {
"line_hashes": [
"84345622763067794508652377326428417408",
"298842848955414094869198051441990877374",
"517334957051159777256904848176696124",
"280922175381616877862468366288413015449",
"329860757054081954995668987108106027827",
"152593464202573372622609636587151396481",
"157578658809349996958742546620968571368",
"72581276338793776739778802060114213740",
"240426111261100419214366501826361834228",
"54798474586704981262661179050849834062"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eb769ff4e281f751adcaf4f4445cbf30817be139",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-26925-d1c8f756",
"digest": {
"function_hash": "114763161776045107813801477222499810677",
"length": 327.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8038ee3c3e5b59bcd78467686db5270c68544e30",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "nf_tables_abort"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-26925-d30d982d",
"digest": {
"function_hash": "91937974584981003739250744832944544299",
"length": 5207.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d459e2ffb541841714839e8228b845458ed3b27",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "__nf_tables_abort"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-26925-f56bef2d",
"digest": {
"function_hash": "76587454666969454808700678709960060205",
"length": 4348.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2cee2ff7f8cce12a63a0a23ffe27f08d99541494",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "__nf_tables_abort"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2024-26925-f7c10036",
"digest": {
"line_hashes": [
"84345622763067794508652377326428417408",
"298842848955414094869198051441990877374",
"517334957051159777256904848176696124",
"280922175381616877862468366288413015449",
"329860757054081954995668987108106027827",
"152593464202573372622609636587151396481",
"157578658809349996958742546620968571368",
"72581276338793776739778802060114213740",
"240426111261100419214366501826361834228",
"54798474586704981262661179050849834062"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a34ba4bdeec0c3b629160497594908dc820110f1",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-26925-fb856d03",
"digest": {
"function_hash": "114763161776045107813801477222499810677",
"length": 327.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eb769ff4e281f751adcaf4f4445cbf30817be139",
"signature_version": "v1",
"target": {
"file": "net/netfilter/nf_tables_api.c",
"function": "nf_tables_abort"
}
}
]