CVE-2024-35898 - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()

Back Back to CVE browser

HIGH

netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()

Published May 19, 2024

7.0

HIGH

CVSS 3.1

EPSS 0.20%

Description

nft_unregister_flowtable_type() within nf_flow_inet_module_exit() can concurrent with __nft_flowtable_type_get() within nf_tables_newflowtable(). And thhere is not any protection when iterate over nf_tables_flowtables list in __nft_flowtable_type_get(). Therefore, there is pertential data-race of nf_tables_flowtables list entry.

Use list_for_each_entry_rcu() to iterate over nf_tables_flowtables list in __nft_flowtable_type_get(), and use rcu_read_lock() in the caller nft_flowtable_type_get() to protect the entire type query process.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  4.16
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <4.16
- Version
  4.19.312
  Status
  unaffected
  Constraints
  <=4.19.*
- Version
  5.10.215
  Status
  unaffected
  Constraints
  <=5.10.*
- Version
  5.15.154
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  5.4.274
  Status
  unaffected
  Constraints
  <=5.4.*
- Version
  6.1.85
  Status
  unaffected
  Constraints
  <=6.1.*
- Version
  6.6.26
  Status
  unaffected
  Constraints
  <=6.6.*
- Version
  6.8.5
  Status
  unaffected
  Constraints
  <=6.8.*
- Version
  6.9
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
4.16	affected	-
0	unaffected	<4.16
4.19.312	unaffected	<=4.19.*
5.10.215	unaffected	<=5.10.*
5.15.154	unaffected	<=5.15.*
5.4.274	unaffected	<=5.4.*
6.1.85	unaffected	<=6.1.*
6.6.26	unaffected	<=6.6.*
6.8.5	unaffected	<=6.8.*
6.9	unaffected	<=*

Red Hat Enterprise Linux 8

kernel-0:4.18.0-553.27.1.el8_10

Fixed · RHSA-2024:8856
Red Hat Enterprise Linux 8

kernel-rt-0:4.18.0-553.27.1.rt7.368.el8_10

Fixed · RHSA-2024:8870
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

kernel-0:4.18.0-372.123.1.el8_6

Fixed · RHSA-2024:6753
Red Hat Enterprise Linux 8.6 Telecommunications Update Service

kernel-0:4.18.0-372.123.1.el8_6

Fixed · RHSA-2024:6753
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

kernel-0:4.18.0-372.123.1.el8_6

Fixed · RHSA-2024:6753
Red Hat Enterprise Linux 8.8 Extended Update Support

kernel-0:4.18.0-477.74.1.el8_8

Fixed · RHSA-2024:6993
Red Hat Enterprise Linux 9

kernel-0:5.14.0-427.33.1.el9_4

Fixed · RHSA-2024:5928
Red Hat Enterprise Linux 9

kernel-0:5.14.0-427.33.1.el9_4

Fixed · RHSA-2024:5928
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

kernel-0:5.14.0-70.112.1.el9_0

Fixed · RHSA-2024:5257
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

kernel-rt-0:5.14.0-70.112.1.rt21.184.el9_0

Fixed · RHSA-2024:5256
Red Hat Enterprise Linux 9.2 Extended Update Support

kernel-0:5.14.0-284.73.1.el9_2

Fixed · RHSA-2024:4533
Red Hat Enterprise Linux 9.2 Extended Update Support

kernel-rt-0:5.14.0-284.73.1.rt14.358.el9_2

Fixed · RHSA-2024:4554
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel-rt

Out of support scope
Red Hat Enterprise Linux 9

kernel-rt

Affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 8	kernel-0:4.18.0-553.27.1.el8_10	Fixed	RHSA-2024:8856
Red Hat Enterprise Linux 8	kernel-rt-0:4.18.0-553.27.1.rt7.368.el8_10	Fixed	RHSA-2024:8870
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	kernel-0:4.18.0-372.123.1.el8_6	Fixed	RHSA-2024:6753
Red Hat Enterprise Linux 8.6 Telecommunications Update Service	kernel-0:4.18.0-372.123.1.el8_6	Fixed	RHSA-2024:6753
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	kernel-0:4.18.0-372.123.1.el8_6	Fixed	RHSA-2024:6753
Red Hat Enterprise Linux 8.8 Extended Update Support	kernel-0:4.18.0-477.74.1.el8_8	Fixed	RHSA-2024:6993
Red Hat Enterprise Linux 9	kernel-0:5.14.0-427.33.1.el9_4	Fixed	RHSA-2024:5928
Red Hat Enterprise Linux 9	kernel-0:5.14.0-427.33.1.el9_4	Fixed	RHSA-2024:5928
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	kernel-0:5.14.0-70.112.1.el9_0	Fixed	RHSA-2024:5257
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	kernel-rt-0:5.14.0-70.112.1.rt21.184.el9_0	Fixed	RHSA-2024:5256
Red Hat Enterprise Linux 9.2 Extended Update Support	kernel-0:5.14.0-284.73.1.el9_2	Fixed	RHSA-2024:4533
Red Hat Enterprise Linux 9.2 Extended Update Support	kernel-rt-0:5.14.0-284.73.1.rt14.358.el9_2	Fixed	RHSA-2024:4554
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 9	kernel-rt	Affected	n/a

Remediation

No remediation recorded yet.

Metrics

0.20% 0.00204

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 4, 2026.

EPSS probability 0.00204

Score over time

2024-2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (5 key points)

Flat stretches are collapsed. Showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 4, 2026	0.20% (0.00204)	9.35th	v5 (v2026.06.15)
Jun 15, 2026	0.19% (0.00195)	9.25th	v5 (v2026.06.15)
Mar 17, 2025	0.08% (0.00084)	22.18th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00044)	15.00th	v3 (v2023.03.01)
May 20, 2024	0.04% (0.00044)	12.53th	v3 (v2023.03.01)

Weaknesses (2)

CWE-362

Race Condition

CWE-366

References (16)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2024-35898		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2281669		Issue Tracking
https://cert-portal.siemens.com/productcert/html/ssa-265688.html
https://git.kernel.org/stable/c/24225011d81b471acc0e1e315b7d9905459a6304		Patch
https://git.kernel.org/stable/c/2485bcfe05ee3cf9ca8923a94fa2e456924c79c8		Patch
https://git.kernel.org/stable/c/69d1fe14a680042ec913f22196b58e2c8ff1b007		Patch
https://git.kernel.org/stable/c/8b891153b2e4dc0ca9d9dab8f619d49c740813df		Patch
https://git.kernel.org/stable/c/940d41caa71f0d3a52df2fde5fada524a993e331		Patch
https://git.kernel.org/stable/c/9b5b7708ec2be21dd7ef8ca0e3abe4ae9f3b083b		Patch
https://git.kernel.org/stable/c/a347bc8e6251eaee4b619da28020641eb5b0dd77		Patch
https://git.kernel.org/stable/c/e684b1674fd1ca4361812a491242ae871d6b2859		Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html		Mailing ListThird Party Advisory
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html		Mailing ListThird Party Advisory
https://lore.kernel.org/linux-cve-announce/2024051951-CVE-2024-35898-a10e@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-35898
https://www.cve.org/CVERecord?id=CVE-2024-35898