Not rated
CVE-2024-26835 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: set dormant flag on hook…
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: set dormant flag on hook register failure We need to set the dormant flag again if we fail to register the hooks. During memory pressure hook registration can fail and we end up with a table marked as active but no registered hooks. On table/base chain deletion, nf_tables will attempt to unregister the hook again which yields a warn splat from the nftables core.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux 6.8 | earliest → < 6.8 | 6.8 |
| Linux 6.7 | earliest → < 6.7.7 | 6.7.7 |
| Linux 6.6 | earliest → < 6.6.19 | 6.6.19 |
| Linux 6.1 | earliest → < 6.1.80 | 6.1.80 |
| Linux 5.15 | earliest → < 5.15.150 | 5.15.150 |
| Linux | 5.13 | No fix stated |
| Linux 5.10 | earliest → < 5.10.211 | 5.10.211 |
| Linux 5.4 | earliest → < 5.4.270 | 5.4.270 |
| RUGGEDCOM RST2428P | Versions not published |
Show the 5 other branches Hide the 5 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family | Versions not published | |
| SCALANCE XCM-/XRM-/XCH-/XRH-300 family | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
Other CVEs of Linux
The 18300 CVEs of Linux →
CVE-2026-99284
net: skbuff: propagate shared-frag marker in skb_zerocopy()
Not rated
CVE-2026-99283
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
Not rated
CVE-2026-99282
net/sched: sch_teql: fix use-after-free on lower qdisc drop
Not rated
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless device
Not rated