CVE-2024-35898

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() nft_unregister_flowtable_type() within nf_flow_inet_module_exit() can concurrent with __nft_flowtable_type_get() within nf_tables_newflowtable(). And thhere is not any protection when iterate over nf_tables_flowtables list in __nft_flowtable_type_get(). Therefore, there is pertential data-race of nf_tables_flowtables list entry. Use list_for_each_entry_rcu() to iterate over nf_tables_flowtables list in __nft_flowtable_type_get(), and use rcu_read_lock() in the caller nft_flowtable_type_get() to protect the entire type query process.

• CWE-362

• https://git.kernel.org/stable/c/24225011d81b471acc0e1e315b7d9905459a6304Patch
• https://git.kernel.org/stable/c/2485bcfe05ee3cf9ca8923a94fa2e456924c79c8Patch
• https://git.kernel.org/stable/c/69d1fe14a680042ec913f22196b58e2c8ff1b007Patch
• https://git.kernel.org/stable/c/8b891153b2e4dc0ca9d9dab8f619d49c740813dfPatch
• https://git.kernel.org/stable/c/940d41caa71f0d3a52df2fde5fada524a993e331Patch
• https://git.kernel.org/stable/c/9b5b7708ec2be21dd7ef8ca0e3abe4ae9f3b083bPatch
• https://git.kernel.org/stable/c/a347bc8e6251eaee4b619da28020641eb5b0dd77Patch
• https://git.kernel.org/stable/c/e684b1674fd1ca4361812a491242ae871d6b2859Patch
• https://git.kernel.org/stable/c/24225011d81b471acc0e1e315b7d9905459a6304Patch
• https://git.kernel.org/stable/c/2485bcfe05ee3cf9ca8923a94fa2e456924c79c8Patch
• https://git.kernel.org/stable/c/69d1fe14a680042ec913f22196b58e2c8ff1b007Patch
• https://git.kernel.org/stable/c/8b891153b2e4dc0ca9d9dab8f619d49c740813dfPatch
• https://git.kernel.org/stable/c/940d41caa71f0d3a52df2fde5fada524a993e331Patch
• https://git.kernel.org/stable/c/9b5b7708ec2be21dd7ef8ca0e3abe4ae9f3b083bPatch
• https://git.kernel.org/stable/c/a347bc8e6251eaee4b619da28020641eb5b0dd77Patch
• https://git.kernel.org/stable/c/e684b1674fd1ca4361812a491242ae871d6b2859Patch
• https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2024/06/msg00020.htmlMailing List, Third Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-265688.html

Published

May 19, 2024

Last Modified

Aug 4, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-35892In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35893In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35894In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-35895In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35896In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-35897In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35899In the Linux kernel, the following vulnerability has been re…7.3
• CVE-2024-3590The LetterPress WordPress plugin through 1.2.2 does not hav…6.1
• CVE-2024-35900In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35901In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35902In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-35903In the Linux kernel, the following vulnerability has been re…5.5