2024-05-01 08:03:29 +00:00
{
"id" : "CVE-2024-27020" ,
"sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"published" : "2024-05-01T06:15:20.840" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-21T09:03:40.660" ,
2024-06-25 23:58:14 +00:00
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2024-05-01 08:03:29 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()\n\nnft_unregister_expr() can concurrent with __nft_expr_type_get(),\nand there is not any protection when iterate over nf_tables_expressions\nlist in __nft_expr_type_get(). Therefore, there is potential data-race\nof nf_tables_expressions list entry.\n\nUse list_for_each_entry_rcu() to iterate over nf_tables_expressions\nlist in __nft_expr_type_get(), and use rcu_read_lock() in the caller\nnft_expr_type_get() to protect the entire type query process."
2024-05-03 04:03:33 +00:00
} ,
{
"lang" : "es" ,
"value" : "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: netfilter: nf_tables: corrige una posible ejecuci\u00f3n de datos en __nft_expr_type_get() nft_unregister_expr() puede concurrente con __nft_expr_type_get(), y no hay ninguna protecci\u00f3n cuando se itera sobre la lista nf_tables_expressions en __nft_expr_type_get() . Por lo tanto, existe una posible ejecuci\u00f3n de datos en la entrada de la lista nf_tables_expressions. Utilice list_for_each_entry_rcu() para iterar sobre la lista nf_tables_expressions en __nft_expr_type_get() y utilice rcu_read_lock() en el llamador nft_expr_type_get() para proteger todo el proceso de consulta de tipos."
2024-05-01 08:03:29 +00:00
}
] ,
2024-05-23 20:03:29 +00:00
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 7.0 ,
"baseSeverity" : "HIGH" ,
2024-05-23 20:03:29 +00:00
"attackVector" : "LOCAL" ,
"attackComplexity" : "HIGH" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "HIGH"
2024-05-23 20:03:29 +00:00
} ,
"exploitabilityScore" : 1.0 ,
"impactScore" : 5.9
2024-10-30 21:03:21 +00:00
} ,
{
"source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 7.0 ,
"baseSeverity" : "HIGH" ,
2024-10-30 21:03:21 +00:00
"attackVector" : "LOCAL" ,
"attackComplexity" : "HIGH" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "HIGH"
2024-10-30 21:03:21 +00:00
} ,
"exploitabilityScore" : 1.0 ,
"impactScore" : 5.9
2024-05-23 20:03:29 +00:00
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
2024-10-30 21:03:21 +00:00
"value" : "CWE-362"
}
]
} ,
{
"source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
2024-05-23 20:03:29 +00:00
"value" : "CWE-362"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "3.13" ,
"versionEndExcluding" : "4.19.313" ,
"matchCriteriaId" : "22DD99BA-225B-49F6-AD13-22F00AEDE90F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.20" ,
"versionEndExcluding" : "5.4.275" ,
"matchCriteriaId" : "5FF6D8DE-C559-4586-86C8-2C6B4420A2C2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.5" ,
"versionEndExcluding" : "5.10.216" ,
"matchCriteriaId" : "A44ABF89-F1BD-4C9A-895D-7596650DCD27"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.11" ,
"versionEndExcluding" : "5.15.157" ,
"matchCriteriaId" : "C67E2ABA-9F30-4CE6-A840-B1051D07E0CF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.16" ,
"versionEndExcluding" : "6.1.88" ,
"matchCriteriaId" : "B665F958-644E-434D-A78D-CCD1628D1774"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.2" ,
"versionEndExcluding" : "6.6.29" ,
"matchCriteriaId" : "0999E154-1E68-41FA-8DE3-9A735E382224"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.7" ,
"versionEndExcluding" : "6.8.8" ,
"matchCriteriaId" : "673B3328-389D-41A4-9617-669298635262"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*" ,
"matchCriteriaId" : "22BEDD49-2C6D-402D-9DBF-6646F6ECD10B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*" ,
"matchCriteriaId" : "DF73CB2A-DFFD-46FB-9BFE-AA394F27EA37"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*" ,
"matchCriteriaId" : "52048DDA-FC5A-4363-95A0-A6357B4D7F8C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*" ,
"matchCriteriaId" : "A06B2CCF-3F43-4FA9-8773-C83C3F5764B2"
}
]
}
]
}
] ,
2024-05-01 08:03:29 +00:00
"references" : [
{
"url" : "https://git.kernel.org/stable/c/01f1a678b05ade4b1248019c2dcca773aebbeb7f" ,
2024-05-23 20:03:29 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-05-01 08:03:29 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/0b6de00206adbbfc6373b3ae38d2a6f197987907" ,
2024-05-23 20:03:29 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-05-01 08:03:29 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/8d56bad42ac4c43c6c72ddd6a654a2628bf839c5" ,
2024-05-23 20:03:29 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-05-01 08:03:29 +00:00
} ,
{
2024-05-03 08:03:28 +00:00
"url" : "https://git.kernel.org/stable/c/934e66e231cff2b18faa2c8aad0b8cec13957e05" ,
2024-05-23 20:03:29 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-05-01 08:03:29 +00:00
} ,
{
2024-05-03 08:03:28 +00:00
"url" : "https://git.kernel.org/stable/c/939109c0a8e2a006a6cc8209e262d25065f4403a" ,
2024-05-23 20:03:29 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-05-03 04:03:33 +00:00
} ,
{
2024-05-03 08:03:28 +00:00
"url" : "https://git.kernel.org/stable/c/a9ebf340d123ae12582210407f879d6a5a1bc25b" ,
2024-05-23 20:03:29 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-05-03 04:03:33 +00:00
} ,
{
2024-05-03 08:03:28 +00:00
"url" : "https://git.kernel.org/stable/c/b38a133d37fa421c8447b383d788c9cc6f5cb34c" ,
2024-05-23 20:03:29 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-05-03 04:03:33 +00:00
} ,
{
2024-05-03 08:03:28 +00:00
"url" : "https://git.kernel.org/stable/c/f969eb84ce482331a991079ab7a5c4dc3b7f89bf" ,
2024-05-23 20:03:29 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/01f1a678b05ade4b1248019c2dcca773aebbeb7f" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
} ,
{
"url" : "https://git.kernel.org/stable/c/0b6de00206adbbfc6373b3ae38d2a6f197987907" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
} ,
{
"url" : "https://git.kernel.org/stable/c/8d56bad42ac4c43c6c72ddd6a654a2628bf839c5" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
} ,
{
"url" : "https://git.kernel.org/stable/c/934e66e231cff2b18faa2c8aad0b8cec13957e05" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
} ,
{
"url" : "https://git.kernel.org/stable/c/939109c0a8e2a006a6cc8209e262d25065f4403a" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
} ,
{
"url" : "https://git.kernel.org/stable/c/a9ebf340d123ae12582210407f879d6a5a1bc25b" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
} ,
{
"url" : "https://git.kernel.org/stable/c/b38a133d37fa421c8447b383d788c9cc6f5cb34c" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
} ,
{
"url" : "https://git.kernel.org/stable/c/f969eb84ce482331a991079ab7a5c4dc3b7f89bf" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
} ,
{
"url" : "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2024-05-01 08:03:29 +00:00
}
]
}
