CVE-2024-26581
netfilter: nft_set_rbtree: skip end interval element from gc
HIGH 7.8EPSS 2.2%
In the Linux kernel, the following vulnerability has been resolved:netfilter: nft_set_rbtree: skip end interval element from gcrbtree lazy gc on insert might collect an end interval element that hasbeen just added in this transactions, skip end interval elements thatare not yet active.
- Affected
- Linux
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 2.21% chance of exploitation in the next 30 days, 82nd percentile
- Published
- 2024-02-20
- Updated
- 2026-08-05
Proof-of-concept exploits (2)
- MPI-SysSec/DirtyFree31★ · 2026-03-04
- MPI-SysSec/Heap-Localization9★ · 2026-06-03
Exploit collections (1)
- linux/kernelctf/CVE-2024-26581_lts_cos_mitigationgoogle/security-research
Security advisories
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
- https://git.kernel.org/stable/c/10e9cb39313627f2eae4cd70c4b742074e998fd8
- https://git.kernel.org/stable/c/1296c110c5a0b45a8fcf58e7d18bc5da61a565cb
- https://git.kernel.org/stable/c/2bab493a5624444ec6e648ad0d55a362bcb4c003
- https://git.kernel.org/stable/c/4cee42fcf54fec46b344681e7cc4f234bb22f85a
- https://git.kernel.org/stable/c/60c0c230c6f046da536d3df8b39a20b9a9fd6af0
- https://git.kernel.org/stable/c/6eb14441f10602fa1cf691da9d685718b68b78a9
- https://git.kernel.org/stable/c/b734f7a47aeb32a5ba298e4ccc16bb0c52b6dbf7
- https://git.kernel.org/stable/c/c60d252949caf9aba537525195edae6bbabc35eb