{"id":"CVE-2024-35900","revision":"e9ceba0e2b934921b254d23948a21504","records":[{"revision":"e9ceba0e2b934921b254d23948a21504","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-35900","aliases":[],"title":"netfilter: nf_tables: reject new basechain after table flag update","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: reject new basechain after table flag update\n\nWhen dormant flag is toggled, hooks are disabled in the commit phase by\niterating over current chains in table (existing and new).\n\nThe following configuration allows for an inconsistent state:\n\n  add table x\n  add chain x y { type filter hook input priority 0; }\n  add table x { flags dormant; }\n  add chain x w { type filter hook input priority 1; }\n\nwhich triggers the following warning when trying to unregister chain w\nwhich is already unregistered.\n\n[  127.322252] WARNING: CPU: 7 PID: 1211 at net/netfilter/core.c:50                                                                     1 __nf_unregister_net_hook+0x21a/0x260\n[...]\n[  127.322519] Call Trace:\n[  127.322521]  <TASK>\n[  127.322524]  ? __warn+0x9f/0x1a0\n[  127.322531]  ? __nf_unregister_net_hook+0x21a/0x260\n[  127.322537]  ? report_bug+0x1b1/0x1e0\n[  127.322545]  ? handle_bug+0x3c/0x70\n[  127.322552]  ? exc_invalid_op+0x17/0x40\n[  127.322556]  ? asm_exc_invalid_op+0x1a/0x20\n[  127.322563]  ? kasan_save_free_info+0x3b/0x60\n[  127.322570]  ? __nf_unregister_net_hook+0x6a/0x260\n[  127.322577]  ? __nf_unregister_net_hook+0x21a/0x260\n[  127.322583]  ? __nf_unregister_net_hook+0x6a/0x260\n[  127.322590]  ? __nf_tables_unregister_hook+0x8a/0xe0 [nf_tables]\n[  127.322655]  nft_table_disable+0x75/0xf0 [nf_tables]\n[  127.322717]  nf_tables_commit+0x2571/0x2620 [nf_tables]","state":0,"publishedAt":"2024-05-19T08:34:54.016+00:00","modifiedAt":"2026-10-15T00:41:19.128+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/netfilter/nf_tables_api.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"bf8083bbf8fa202e6e5316bbd99759ab82bfe7a3\",\n                            \"lessThan\": \"6d12f21f8bbe23fde25b77c2bf5973c136b8bef8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e10f661adc556c4969c70ddaddf238bffdaf1e87\",\n                            \"lessThan\": \"41bad13c0e8a5a2b47a7472cced922555372daab\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d9c4da8cb74e8ee6e58a064a3573aa37acf6c935\",\n                            \"lessThan\": \"7b6fba6918714afee3e17796113ccab636255c7b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"179d9ba5559a756f4322583388b3213fe4e391b0\",\n                            \"lessThan\": \"8ba81dca416adf82fc5a2a23abc1a8cc02ad32fb\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"179d9ba5559a756f4322583388b3213fe4e391b0\",\n                            \"lessThan\": \"745cf6a843896cdac8766c74379300ed73c78830\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"179d9ba5559a756f4322583388b3213fe4e391b0\",\n                            \"lessThan\": \"420132bee3d0136b7fba253a597b098fe15493a7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"179d9ba5559a756f4322583388b3213fe4e391b0\",\n                            \"lessThan\": \"e95bb4cba94c018be24b11f017d1c55dd6cda31a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"179d9ba5559a756f4322583388b3213fe4e391b0\",\n                            \"lessThan\": \"994209ddf4f430946f6247616b2e33d179243769\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5.4.262\",\n                            \"lessThan\": \"5.4.274\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.202\",\n                            \"lessThan\": \"5.10.215\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/netfilter/nf_tables_api.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.13\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.13\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.274\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.215\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.154\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.85\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.26\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.8.5\",\n                            \"lessThanOrEqual\": \"6.8.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.9\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/6d12f21f8bbe23fde25b77c2bf5973c136b8bef8","https://git.kernel.org/stable/c/41bad13c0e8a5a2b47a7472cced922555372daab","https://git.kernel.org/stable/c/7b6fba6918714afee3e17796113ccab636255c7b","https://git.kernel.org/stable/c/8ba81dca416adf82fc5a2a23abc1a8cc02ad32fb","https://git.kernel.org/stable/c/745cf6a843896cdac8766c74379300ed73c78830","https://git.kernel.org/stable/c/420132bee3d0136b7fba253a597b098fe15493a7","https://git.kernel.org/stable/c/e95bb4cba94c018be24b11f017d1c55dd6cda31a","https://git.kernel.org/stable/c/994209ddf4f430946f6247616b2e33d179243769"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-35900","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-35900","identifiers":["CVE-2024-35900"]},"retained":false,"historicalAffected":[]}],"coverage":[]}