CVE-2024-26925

Fixed in a distro release EPSS <1%CVSS 7.8

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path The commit mutex should not be released during the critical section between nft_gc_seq_begin() and nft_gc_seq_end(), otherwise, async GC worker could collect expired objects and get the released commit lock within the same GC sequence. nf_tables_module_autoload() temporarily releases the mutex to load module dependencies, then it goes back to replay the transaction again. Move it at the end of the abort phase after nft_gc_seq_end() is called.

Published 2024-04-24 · CVE record · OSV

Products: Linux, Siemens RUGGEDCOM RM1224 LTE(4G) EU, Siemens RUGGEDCOM RM1224 LTE(4G) NAM, Siemens SCALANCE M804PB, Siemens SCALANCE M812-1 ADSL-Router, Siemens SCALANCE M816-1 ADSL-Router, Siemens SCALANCE M826-2 SHDSL-Router, Siemens SCALANCE M874-2, Siemens SCALANCE M874-3, Siemens SCALANCE M874-3 3G-Router (CN), Siemens SCALANCE M876-3, Siemens SCALANCE M876-3 (ROK), Siemens SCALANCE M876-4, Siemens SCALANCE M876-4 (EU), Siemens SCALANCE M876-4 (NAM), Siemens SCALANCE MUM853-1 (A1), Siemens SCALANCE MUM853-1 (B1), Siemens SCALANCE MUM853-1 (EU), Siemens SCALANCE MUM856-1 (A1), Siemens SCALANCE MUM856-1 (B1), Siemens SCALANCE MUM856-1 (CN), Siemens SCALANCE MUM856-1 (EU), Siemens SCALANCE MUM856-1 (RoW), Siemens SCALANCE S615 EEC LAN-Router, Siemens SCALANCE S615 LAN-Router, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

Distro releases