CVE-2024-35897

Hook unregistration is deferred to the commit phase, same occurs with hook updates triggered by the table dormant flag. When both commands are combined, this results in deleting a basechain while leaving its hook still registered in the core.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

bf8083bbf8fa202e6e5316bbd99759ab82bfe7a3

Fixed

e75faf01e22ec7dc671640fa0e0968964fafd2fc

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

e10f661adc556c4969c70ddaddf238bffdaf1e87

Fixed

9a3b90904d8a072287480eed4c3ece4b99d64f78

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

d9c4da8cb74e8ee6e58a064a3573aa37acf6c935

Fixed

b58d0ac35f6d75ec1db8650a29dfd6f292c11362

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

179d9ba5559a756f4322583388b3213fe4e391b0

Fixed

6cbbe1ba76ee7e674a86abd43009b083a45838cb

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

179d9ba5559a756f4322583388b3213fe4e391b0

Fixed

2aeb805a1bcd5f27c8c0d1a9d4d653f16d1506f4

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

179d9ba5559a756f4322583388b3213fe4e391b0

Fixed

9627fd0c6ea1c446741a33e67bc5709c59923827

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

179d9ba5559a756f4322583388b3213fe4e391b0

Fixed

7f609f630951b624348373cef99991ce08831927

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

179d9ba5559a756f4322583388b3213fe4e391b0

Fixed

1bc83a019bbe268be3526406245ec28c2458a518

Affected versions

v5.*

v5.10.202

v5.10.203

v5.10.204

v5.10.205

v5.10.206

v5.10.207

v5.10.208

v5.10.209

v5.10.210

v5.10.211

v5.10.212

v5.10.213

v5.10.214

v5.13

v5.13-rc1

v5.13-rc2

v5.13-rc3

v5.13-rc4

v5.13-rc5

v5.13-rc6

v5.13-rc7

v5.14

v5.14-rc1

v5.14-rc2

v5.14-rc3

v5.14-rc4

v5.14-rc5

v5.14-rc6

v5.14-rc7

v5.15

v5.15-rc1

v5.15-rc2

v5.15-rc3

v5.15-rc4

v5.15-rc5

v5.15-rc6

v5.15-rc7

v5.15.1

v5.15.10

v5.15.100

v5.15.101

v5.15.102

v5.15.103

v5.15.104

v5.15.105

v5.15.106

v5.15.107

v5.15.108

v5.15.109

v5.15.11

v5.15.110

v5.15.111

v5.15.112

v5.15.113

v5.15.114

v5.15.115

v5.15.116

v5.15.117

v5.15.118

v5.15.119

v5.15.12

v5.15.120

v5.15.121

v5.15.122

v5.15.123

v5.15.124

v5.15.125

v5.15.126

v5.15.127

v5.15.128

v5.15.129

v5.15.13

v5.15.130

v5.15.131

v5.15.132

v5.15.133

v5.15.134

v5.15.135

v5.15.136

v5.15.137

v5.15.138

v5.15.139

v5.15.14

v5.15.140

v5.15.141

v5.15.142

v5.15.143

v5.15.144

v5.15.145

v5.15.146

v5.15.147

v5.15.148

v5.15.149

v5.15.15

v5.15.150

v5.15.151

v5.15.152

v5.15.153

v5.15.154

v5.15.16

v5.15.17

v5.15.18

v5.15.19

v5.15.2

v5.15.20

v5.15.21

v5.15.22

v5.15.23

v5.15.24

v5.15.25

v5.15.26

v5.15.27

v5.15.28

v5.15.29

v5.15.3

v5.15.30

v5.15.31

v5.15.32

v5.15.33

v5.15.34

v5.15.35

v5.15.36

v5.15.37

v5.15.38

v5.15.39

v5.15.4

v5.15.40

v5.15.41

v5.15.42

v5.15.43

v5.15.44

v5.15.45

v5.15.46

v5.15.47

v5.15.48

v5.15.49

v5.15.5

v5.15.50

v5.15.51

v5.15.52

v5.15.53

v5.15.54

v5.15.55

v5.15.56

v5.15.57

v5.15.58

v5.15.59

v5.15.6

v5.15.60

v5.15.61

v5.15.62

v5.15.63

v5.15.64

v5.15.65

v5.15.66

v5.15.67

v5.15.68

v5.15.69

v5.15.7

v5.15.70

v5.15.71

v5.15.72

v5.15.73

v5.15.74

v5.15.75

v5.15.76

v5.15.77

v5.15.78

v5.15.79

v5.15.8

v5.15.80

v5.15.81

v5.15.82

v5.15.83

v5.15.84

v5.15.85

v5.15.86

v5.15.87

v5.15.88

v5.15.89

v5.15.9

v5.15.90

v5.15.91

v5.15.92

v5.15.93

v5.15.94

v5.15.95

v5.15.96

v5.15.97

v5.15.98

v5.15.99

v5.16

v5.16-rc1

v5.16-rc2

v5.16-rc3

v5.16-rc4

v5.16-rc5

v5.16-rc6

v5.16-rc7

v5.16-rc8

v5.17

v5.17-rc1

v5.17-rc2

v5.17-rc3

v5.17-rc4

v5.17-rc5

v5.17-rc6

v5.17-rc7

v5.17-rc8

v5.18

v5.18-rc1

v5.18-rc2

v5.18-rc3

v5.18-rc4

v5.18-rc5

v5.18-rc6

v5.18-rc7

v5.19

v5.19-rc1

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v5.4.262

v5.4.263

v5.4.264

v5.4.265

v5.4.266

v5.4.267

v5.4.268

v5.4.269

v5.4.270

v5.4.271

v5.4.272

v5.4.273

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.1.1

v6.1.10

v6.1.11

v6.1.12

v6.1.13

v6.1.14

v6.1.15

v6.1.16

v6.1.17

v6.1.18

v6.1.19

v6.1.2

v6.1.20

v6.1.21

v6.1.22

v6.1.23

v6.1.24

v6.1.25

v6.1.26

v6.1.27

v6.1.28

v6.1.29

v6.1.3

v6.1.30

v6.1.31

v6.1.32

v6.1.33

v6.1.34

v6.1.35

v6.1.36

v6.1.37

v6.1.38

v6.1.39

v6.1.4

v6.1.40

v6.1.41

v6.1.42

v6.1.43

v6.1.44

v6.1.45

v6.1.46

v6.1.47

v6.1.48

v6.1.49

v6.1.5

v6.1.50

v6.1.51

v6.1.52

v6.1.53

v6.1.54

v6.1.55

v6.1.56

v6.1.57

v6.1.58

v6.1.59

v6.1.6

v6.1.60

v6.1.61

v6.1.62

v6.1.63

v6.1.64

v6.1.65

v6.1.66

v6.1.67

v6.1.68

v6.1.69

v6.1.7

v6.1.70

v6.1.71

v6.1.72

v6.1.73

v6.1.74

v6.1.75

v6.1.76

v6.1.77

v6.1.78

v6.1.79

v6.1.8

v6.1.80

v6.1.81

v6.1.82

v6.1.83

v6.1.84

v6.1.85

v6.1.9

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.4

v6.4-rc1

v6.4-rc2

v6.4-rc3

v6.4-rc4

v6.4-rc5

v6.4-rc6

v6.4-rc7

v6.5

v6.5-rc1

v6.5-rc2

v6.5-rc3

v6.5-rc4

v6.5-rc5

v6.5-rc6

v6.5-rc7

v6.6

v6.6-rc1

v6.6-rc2

v6.6-rc3

v6.6-rc4

v6.6-rc5

v6.6-rc6

v6.6-rc7

v6.6.1

v6.6.10

v6.6.11

v6.6.12

v6.6.13

v6.6.14

v6.6.15

v6.6.16

v6.6.17

v6.6.18

v6.6.19

v6.6.2

v6.6.20

v6.6.21

v6.6.22

v6.6.23

v6.6.24

v6.6.25

v6.6.3

v6.6.4

v6.6.5

v6.6.6

v6.6.7

v6.6.8

v6.6.9

v6.7

v6.7-rc1

v6.7-rc2

v6.7-rc3

v6.7-rc4

v6.7-rc5

v6.7-rc6

v6.7-rc7

v6.7-rc8

v6.8

v6.8-rc1

v6.8-rc2

v6.8-rc3

v6.8-rc4

v6.8-rc5

v6.8-rc6

v6.8-rc7

v6.8.1

v6.8.2

v6.8.3

v6.8.4

v6.9-rc1

Database specific

{
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e75faf01e22ec7dc671640fa0e0968964fafd2fc",
            "signature_type": "Function",
            "target": {
                "function": "nf_tables_updtable",
                "file": "net/netfilter/nf_tables_api.c"
            },
            "deprecated": false,
            "digest": {
                "length": 1269.0,
                "function_hash": "200118119506089246002346976959406094279"
            },
            "id": "CVE-2024-35897-2ec6c628"
        },
        {
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f609f630951b624348373cef99991ce08831927",
            "signature_type": "Line",
            "target": {
                "file": "net/netfilter/nf_tables_api.c"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "276572251374236697611766878644263053904",
                    "279015079310043090089699649073205786727",
                    "199468809431570118733236461484276989262",
                    "74758580158425414968408415063075440985",
                    "40677920217058300717385167036440977021",
                    "45164211032749188391070560322481741461",
                    "101082023027876618446207836916864320122"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2024-35897-50325341"
        },
        {
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9627fd0c6ea1c446741a33e67bc5709c59923827",
            "signature_type": "Line",
            "target": {
                "file": "net/netfilter/nf_tables_api.c"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "276572251374236697611766878644263053904",
                    "279015079310043090089699649073205786727",
                    "199468809431570118733236461484276989262",
                    "74758580158425414968408415063075440985",
                    "40677920217058300717385167036440977021",
                    "45164211032749188391070560322481741461",
                    "101082023027876618446207836916864320122"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2024-35897-67d726a4"
        },
        {
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9627fd0c6ea1c446741a33e67bc5709c59923827",
            "signature_type": "Function",
            "target": {
                "function": "nft_table_pending_update",
                "file": "net/netfilter/nf_tables_api.c"
            },
            "deprecated": false,
            "digest": {
                "length": 412.0,
                "function_hash": "58952933623480814377349685241589579750"
            },
            "id": "CVE-2024-35897-6d2b31d9"
        },
        {
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f609f630951b624348373cef99991ce08831927",
            "signature_type": "Function",
            "target": {
                "function": "nft_table_pending_update",
                "file": "net/netfilter/nf_tables_api.c"
            },
            "deprecated": false,
            "digest": {
                "length": 412.0,
                "function_hash": "58952933623480814377349685241589579750"
            },
            "id": "CVE-2024-35897-6f1b5425"
        },
        {
            "signature_version": "v1",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e75faf01e22ec7dc671640fa0e0968964fafd2fc",
            "signature_type": "Line",
            "target": {
                "file": "net/netfilter/nf_tables_api.c"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "35311826816597106133442782214868084942",
                    "34701524642368134665322467508813609518",
                    "188346904831505778286957026319124305876",
                    "209469950131666019495749062639501981316",
                    "195275115717856666373091524111276639069",
                    "34331255205669014992465536504824222002",
                    "187053218098283472138317772181908485066"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2024-35897-9cbe8783"
        }
    ]
}

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.4.274

Type: ECOSYSTEM
Events: Introduced

5.5.0

Fixed

5.10.215

Type: ECOSYSTEM
Events: Introduced

5.11.0

Fixed

5.15.155

Type: ECOSYSTEM
Events: Introduced

5.13.0

Fixed

6.1.86

Type: ECOSYSTEM
Events: Introduced

5.16.0

Fixed

6.6.26

Type: ECOSYSTEM
Events: Introduced

6.2.0

Fixed

6.8.5