CVE-2024-27065: netfilter: nf_tables: do not compare internal table flags on updates

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: do not compare internal table flags on updates

Restore skipping transaction if table update does not modify flags.

Classification

CVE ID: CVE-2024-27065

Affected Products

Vendor: Linux

Product: Linux

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 15.26% (scored less or equal to compared to others)

EPSS Date: 2025-02-04 (when was this score calculated)

References

https://git.kernel.org/stable/c/845083249d6a392f3a88804e1669bdb936ee129f
https://git.kernel.org/stable/c/2531f907d3e40a6173090f10670ae76d117ab27b
https://git.kernel.org/stable/c/fcf32a5bfcb8a57ac0ce717fcfa4d688c91f1005
https://git.kernel.org/stable/c/640dbf688ba955e83e03de84fbdda8e570b7cce4
https://git.kernel.org/stable/c/9683cb6c2c6c0f45537bf0b8868b5d38fcb63fc7
https://git.kernel.org/stable/c/4d37f12707ee965d338028732575f0b85f6d9e4f
https://git.kernel.org/stable/c/3443e57654f90c9a843ab6a6040c10709fd033aa
https://git.kernel.org/stable/c/df257c435e51651c43b86326d112ddadda76350e
https://git.kernel.org/stable/c/4a0e7f2decbf9bd72461226f1f5f7dcc4b08f139

Timeline