CVE - CVE-2024-56637

CVE-ID
CVE-2024-56637	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Hold module reference while requesting a module User space may unload ip_set.ko while it is itself requesting a set type backend module, leading to a kernel crash. The race condition may be provoked by inserting an mdelay() right after the nfnl_unlock() call.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0e67805e805c1f3edd6f43adbe08ea14b552694b URL:https://git.kernel.org/stable/c/0e67805e805c1f3edd6f43adbe08ea14b552694b MISC:https://git.kernel.org/stable/c/456f010bfaefde84d3390c755eedb1b0a5857c3c URL:https://git.kernel.org/stable/c/456f010bfaefde84d3390c755eedb1b0a5857c3c MISC:https://git.kernel.org/stable/c/5bae60a933ba5d16eed55c6b279be51bcbbc79b0 URL:https://git.kernel.org/stable/c/5bae60a933ba5d16eed55c6b279be51bcbbc79b0 MISC:https://git.kernel.org/stable/c/6099b5d3e37145484fac4b8b4070c3f1abfb3519 URL:https://git.kernel.org/stable/c/6099b5d3e37145484fac4b8b4070c3f1abfb3519 MISC:https://git.kernel.org/stable/c/90bf312a6b6b3d6012137f6776a4052ee85e0340 URL:https://git.kernel.org/stable/c/90bf312a6b6b3d6012137f6776a4052ee85e0340 MISC:https://git.kernel.org/stable/c/ba5e070f36682d07ca7ad2a953e6c9d96be19dca URL:https://git.kernel.org/stable/c/ba5e070f36682d07ca7ad2a953e6c9d96be19dca MISC:https://git.kernel.org/stable/c/e5e2d3024753fdaca818b822e3827614bacbdccf URL:https://git.kernel.org/stable/c/e5e2d3024753fdaca818b822e3827614bacbdccf
Assigning CNA
kernel.org
Date Record Created
20241227	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241227)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)