{"id":"CVE-2024-26642","revision":"8ea6616e84a044738cdeb1acada5ce7a","records":[{"revision":"8ea6616e84a044738cdeb1acada5ce7a","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-26642","aliases":[],"title":"netfilter: nf_tables: disallow anonymous set with timeout flag","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: disallow anonymous set with timeout flag\n\nAnonymous sets are never used with timeout from userspace, reject this.\nException to this rule is NFT_SET_EVAL to ensure legacy meters still work.","state":0,"publishedAt":"2024-03-21T10:43:43.495+00:00","modifiedAt":"2026-10-15T00:38:18.857+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/netfilter/nf_tables_api.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"761da2935d6e18d178582dbdf315a3a458555505\",\n                            \"lessThan\": \"e4988d8415bd0294d6f9f4a1e7095f8b50a97ca9\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"761da2935d6e18d178582dbdf315a3a458555505\",\n                            \"lessThan\": \"e9a0d3f376eb356d54ffce36e7cc37514cbfbd6f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"761da2935d6e18d178582dbdf315a3a458555505\",\n                            \"lessThan\": \"fe40ffbca19dc70d7c6b1e3c77b9ccb404c57351\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"761da2935d6e18d178582dbdf315a3a458555505\",\n                            \"lessThan\": \"7cdc1be24cc1bcd56a3e89ac4aef20e31ad09199\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"761da2935d6e18d178582dbdf315a3a458555505\",\n                            \"lessThan\": \"72c1efe3f247a581667b7d368fff3bd9a03cd57a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"761da2935d6e18d178582dbdf315a3a458555505\",\n                            \"lessThan\": \"c0c2176d1814b92ea4c8e7eb7c9cd94cd99c1b12\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"761da2935d6e18d178582dbdf315a3a458555505\",\n                            \"lessThan\": \"8e07c16695583a66e81f67ce4c46e94dece47ba7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"761da2935d6e18d178582dbdf315a3a458555505\",\n                            \"lessThan\": \"16603605b667b70da974bea8216c93e7db043bf1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/netfilter/nf_tables_api.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.1\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.19.312\",\n                            \"lessThanOrEqual\": \"4.19.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.274\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.215\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.154\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.84\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.24\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.7.12\",\n                            \"lessThanOrEqual\": \"6.7.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.8\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/e4988d8415bd0294d6f9f4a1e7095f8b50a97ca9","https://git.kernel.org/stable/c/e9a0d3f376eb356d54ffce36e7cc37514cbfbd6f","https://git.kernel.org/stable/c/fe40ffbca19dc70d7c6b1e3c77b9ccb404c57351","https://git.kernel.org/stable/c/7cdc1be24cc1bcd56a3e89ac4aef20e31ad09199","https://git.kernel.org/stable/c/72c1efe3f247a581667b7d368fff3bd9a03cd57a","https://git.kernel.org/stable/c/c0c2176d1814b92ea4c8e7eb7c9cd94cd99c1b12","https://git.kernel.org/stable/c/8e07c16695583a66e81f67ce4c46e94dece47ba7","https://git.kernel.org/stable/c/16603605b667b70da974bea8216c93e7db043bf1"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-26642","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-26642","identifiers":["CVE-2024-26642"]},"retained":false,"historicalAffected":[]}],"coverage":[]}