---
id: CVE-2024-26808
title: >-
  In the Linux kernel, the following vulnerability has been resolved:


  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress
  basechain


  Remove netdevice from inet/ingress basechain in case NETDEV_UNREGISTER

  event is report…
summary: >-
  In the Linux kernel, the following vulnerability has been resolved:


  netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress
  basechain


  Remove netdevice from inet/ingress basechain in case NETDEV_UNREGISTER

  event is report…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 5.10, < 5.10.210'
  - 'linux_kernel >= 5.11, < 5.15.149'
  - 'linux_kernel >= 5.16, <= 6.1.76'
  - 'linux_kernel >= 6.2, < 6.6.15'
  - 'linux_kernel >= 6.7, < 6.7.3'
  - linux_kernel = 6.8
  - debian_linux = 10.0
patched:
  - linux_kernel 6.7.3
published: '2024-04-04'
updated: '2026-08-04'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-26808'
references:
  - url: 'https://git.kernel.org/stable/c/01acb2e8666a6529697141a6017edbf206921913'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/36a0a80f32209238469deb481967d777a3d539ee'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/70f17b48c86622217a58d5099d29242fc9adac58'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9489e214ea8f2a90345516016aa51f2db3a8cc2f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/af149a46890e8285d1618bd68b8d159bdb87fdb3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e5888acbf1a3d8d021990ce6c6061fd5b2bb21b4'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/01acb2e8666a6529697141a6017edbf206921913'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/36a0a80f32209238469deb481967d777a3d539ee'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/70f17b48c86622217a58d5099d29242fc9adac58'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/9489e214ea8f2a90345516016aa51f2db3a8cc2f'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/af149a46890e8285d1618bd68b8d159bdb87fdb3'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/e5888acbf1a3d8d021990ce6c6061fd5b2bb21b4'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00255
epssPercentile: 0.1527
ingestedAt: '2026-08-05T10:46:49.271Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain

Remove netdevice from inet/ingress basechain in case NETDEV_UNREGISTER
event is reported, otherwise a stale reference to netdevice remains in
the hook list.

## Affected

- `linux_kernel >= 5.10, < 5.10.210`
- `linux_kernel >= 5.11, < 5.15.149`
- `linux_kernel >= 5.16, <= 6.1.76`
- `linux_kernel >= 6.2, < 6.6.15`
- `linux_kernel >= 6.7, < 6.7.3`
- `linux_kernel = 6.8`
- `debian_linux = 10.0`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.7.3`