CVE-2024-26581

netfilter: nft_set_rbtree: skip end interval element from gc

High · published February 20, 2024

CVSS v3.1
7.8
EPSS
2%
Percentile
82.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_rbtree: skip end interval element from gc

rbtree lazy gc on insert might collect an end interval element that has

been just added in this transactions, skip end interval elements that

are not yet active.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02205 · 82.4th percentile
Published
2024-02-20T12:52Z
EPSS history
Timeline
  • 20 FEB 12:52Z
    netfilter: nft_set_rbtree: skip end interval element from gc
    cvelistv5