High · published December 27, 2024
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: Hold module reference while requesting a module
User space may unload ip_set.ko while it is itself requesting a set type
backend module, leading to a kernel crash. The race condition may be
provoked by inserting an mdelay() right after the nfnl_unlock() call.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 2.6.39, < 5.4.287 | 5.4.287 |
| linux/linux_kernel | ≥ 5.5, < 5.10.231 | 5.10.231 |
| linux/linux_kernel | ≥ 5.11, < 5.15.174 | 5.15.174 |
| linux/linux_kernel | ≥ 5.16, < 6.1.120 | 6.1.120 |
| linux/linux_kernel | ≥ 6.2, < 6.6.66 | 6.6.66 |
| linux/linux_kernel | ≥ 6.7, < 6.12.5 | 6.12.5 |
| linux/linux_kernel | all versions | — |