CVE - CVE-2024-40993

CVE-ID
CVE-2024-40993	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix suspicious rcu_dereference_protected() When destroying all sets, we are either in pernet exit phase or are executing a "destroy all sets command" from userspace. The latter was taken into account in ip_set_dereference() (nfnetlink mutex is held), but the former was not. The patch adds the required check to rcu_dereference_protected() in ip_set_dereference().
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/3799d02ae4208af08e81310770d8754863a246a1 URL:https://git.kernel.org/stable/c/3799d02ae4208af08e81310770d8754863a246a1 MISC:https://git.kernel.org/stable/c/3fc09e1ca854bc234e007a56e0f7431f5e2defb5 URL:https://git.kernel.org/stable/c/3fc09e1ca854bc234e007a56e0f7431f5e2defb5 MISC:https://git.kernel.org/stable/c/523bed6489e089dd8040e72453fb79da47b144c2 URL:https://git.kernel.org/stable/c/523bed6489e089dd8040e72453fb79da47b144c2 MISC:https://git.kernel.org/stable/c/72d9611968867cc4c5509e7708b1507d692b797a URL:https://git.kernel.org/stable/c/72d9611968867cc4c5509e7708b1507d692b797a MISC:https://git.kernel.org/stable/c/788d585e62f487bc4536d454937f737b70d39a33 URL:https://git.kernel.org/stable/c/788d585e62f487bc4536d454937f737b70d39a33 MISC:https://git.kernel.org/stable/c/8ecd06277a7664f4ef018abae3abd3451d64e7a6 URL:https://git.kernel.org/stable/c/8ecd06277a7664f4ef018abae3abd3451d64e7a6 MISC:https://git.kernel.org/stable/c/94dd411c18d7fff9e411555d5c662d29416501e4 URL:https://git.kernel.org/stable/c/94dd411c18d7fff9e411555d5c662d29416501e4
Assigning CNA
kernel.org
Date Record Created
20240712	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240712)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)