Back to CVE records
High 7.8Published May 1, 2024
CVE-2024-27065netfilter: nf_tables: do not compare internal table flags on updates
Updated under an hour ago ()
Does this affect you?
It affects Linux and 6 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not compare internal table flags on updates Restore skipping transaction if table update does not modify flags.
- CVSS
- 7.8 HIGH (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from bf8083bbf8fa202e6e5316bbd99759ab82bfe7a3 before 845083249d6a392f3a88804e1669bdb936ee129f; from e10f661adc556c4969c70ddaddf238bffdaf1e87 before 2531f907d3e40a6173090f10670ae76d117ab27b; from d9c4da8cb74e8ee6e58a064a3573aa37acf6c935 before fcf32a5bfcb8a57ac0ce717fcfa4d688c91f1005; from 179d9ba5559a756f4322583388b3213fe4e391b0 before 640dbf688ba955e83e03de84fbdda8e570b7cce4; from 179d9ba5559a756f4322583388b3213fe4e391b0 before 9683cb6c2c6c0f45537bf0b8868b5d38fcb63fc7; 179d9ba5559a756f4322583388b3213fe4e391b0 builds before 4d37f12707ee965d338028732575f0b85f6d9e4f; from 179d9ba5559a756f4322583388b3213fe4e391b0 before 3443e57654f90c9a843ab6a6040c10709fd033aa; from 179d9ba5559a756f4322583388b3213fe4e391b0 before df257c435e51651c43b86326d112ddadda76350e; and 3 more ranges | CNA record |
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name) | before V1.1.1 | CISA ADP |
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
linux linux_kernel linux:linux_kernel | from 5.4.262 before 5.4.273; from 5.10.202 before 5.10.214; from 5.13.1 before 5.15.153; from 5.16 before 6.1.83; from 6.2 before 6.6.23; from 6.7 before 6.7.11; from 6.8 before 6.8.2; 5.13; and 3 more ranges | NVD |
debian debian_linux debian:debian_linux | 10.0 | NVD |
References
- https://git.kernel.org/stable/c/845083249d6a392f3a88804e1669bdb936ee129fpatch
- https://git.kernel.org/stable/c/2531f907d3e40a6173090f10670ae76d117ab27bpatch
- https://git.kernel.org/stable/c/fcf32a5bfcb8a57ac0ce717fcfa4d688c91f1005patch
- https://git.kernel.org/stable/c/640dbf688ba955e83e03de84fbdda8e570b7cce4patch
- https://git.kernel.org/stable/c/9683cb6c2c6c0f45537bf0b8868b5d38fcb63fc7patch
- https://git.kernel.org/stable/c/4d37f12707ee965d338028732575f0b85f6d9e4fpatch
- https://git.kernel.org/stable/c/3443e57654f90c9a843ab6a6040c10709fd033aapatch
- https://git.kernel.org/stable/c/df257c435e51651c43b86326d112ddadda76350epatch
- https://git.kernel.org/stable/c/4a0e7f2decbf9bd72461226f1f5f7dcc4b08f139patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlmailing-list, third-party-advisory
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.