{"id":"CVE-2024-27020","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()\n\nnft_unregister_expr() can concurrent with __nft_expr_type_get(),\nand there is not any protection…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()\n\nnft_unregister_expr() can concurrent with __nft_expr_type_get(),\nand there is not any protection…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-362"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 3.13, < 4.19.313","linux_kernel >= 4.20, < 5.4.275","linux_kernel >= 5.5, < 5.10.216","linux_kernel >= 5.11, < 5.15.157","linux_kernel >= 5.16, < 6.1.88","linux_kernel >= 6.2, < 6.6.29","linux_kernel >= 6.7, < 6.8.8","linux_kernel = 6.9"],"patched":["linux_kernel 6.8.8"],"published":"2024-05-01","updated":"2026-10-15","sourceUpdated":"2026-10-15T01:17:36.473","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-27020","references":[{"url":"https://git.kernel.org/stable/c/01f1a678b05ade4b1248019c2dcca773aebbeb7f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/0b6de00206adbbfc6373b3ae38d2a6f197987907","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/8d56bad42ac4c43c6c72ddd6a654a2628bf839c5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/934e66e231cff2b18faa2c8aad0b8cec13957e05","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/939109c0a8e2a006a6cc8209e262d25065f4403a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/a9ebf340d123ae12582210407f879d6a5a1bc25b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/b38a133d37fa421c8447b383d788c9cc6f5cb34c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f969eb84ce482331a991079ab7a5c4dc3b7f89bf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/01f1a678b05ade4b1248019c2dcca773aebbeb7f","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/0b6de00206adbbfc6373b3ae38d2a6f197987907","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/8d56bad42ac4c43c6c72ddd6a654a2628bf839c5","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/934e66e231cff2b18faa2c8aad0b8cec13957e05","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/939109c0a8e2a006a6cc8209e262d25065f4403a","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/a9ebf340d123ae12582210407f879d6a5a1bc25b","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/b38a133d37fa421c8447b383d788c9cc6f5cb34c","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/f969eb84ce482331a991079ab7a5c4dc3b7f89bf","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DAMSOZXJEPUOXW33WZYWCVAY7Z5S7OOY/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCBZZEC7L7KTWWAS2NLJK6SO3IZIL4WW/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-613116.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","cve.org"],"epss":0.00221,"epssPercentile":0.11748,"ingestedAt":"2026-10-15T03:30:12.668Z","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2024-10-30T19:26:58.391230Z"},"slug":"CVE-2024-27020","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()\n\nnft_unregister_expr() can concurrent with __nft_expr_type_get(),\nand there is not any protection when iterate over nf_tables_expressions\nlist in __nft_expr_type_get(). Therefore, there is potential data-race\nof nf_tables_expressions list entry.\n\nUse list_for_each_entry_rcu() to iterate over nf_tables_expressions\nlist in __nft_expr_type_get(), and use rcu_read_lock() in the caller\nnft_expr_type_get() to protect the entire type query process.\n\n## Affected\n\n- `linux_kernel >= 3.13, < 4.19.313`\n- `linux_kernel >= 4.20, < 5.4.275`\n- `linux_kernel >= 5.5, < 5.10.216`\n- `linux_kernel >= 5.11, < 5.15.157`\n- `linux_kernel >= 5.16, < 6.1.88`\n- `linux_kernel >= 6.2, < 6.6.29`\n- `linux_kernel >= 6.7, < 6.8.8`\n- `linux_kernel = 6.9`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.8.8`","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}