---
id: CVE-2024-35897
title: >-
  In the Linux kernel, the following vulnerability has been resolved:


  netfilter: nf_tables: discard table flag update with pending basechain
  deletion


  Hook unregistration is deferred to the commit phase, same occurs with

  hook updates trig…
summary: >-
  In the Linux kernel, the following vulnerability has been resolved:


  netfilter: nf_tables: discard table flag update with pending basechain
  deletion


  Hook unregistration is deferred to the commit phase, same occurs with

  hook updates trig…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 5.4.262, < 5.4.274'
  - 'linux_kernel >= 5.10.202, < 5.10.215'
  - 'linux_kernel >= 5.13.1, < 5.15.155'
  - 'linux_kernel >= 5.16, < 6.1.86'
  - 'linux_kernel >= 6.2, < 6.6.26'
  - 'linux_kernel >= 6.7, < 6.8.5'
  - linux_kernel = 5.13
  - linux_kernel = 6.9
  - debian_linux = 10.0
patched:
  - linux_kernel 6.8.5
published: '2024-05-19'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:17:51.077'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-35897'
references:
  - url: 'https://git.kernel.org/stable/c/1bc83a019bbe268be3526406245ec28c2458a518'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/2aeb805a1bcd5f27c8c0d1a9d4d653f16d1506f4'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/6cbbe1ba76ee7e674a86abd43009b083a45838cb'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7f609f630951b624348373cef99991ce08831927'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9627fd0c6ea1c446741a33e67bc5709c59923827'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9a3b90904d8a072287480eed4c3ece4b99d64f78'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b58d0ac35f6d75ec1db8650a29dfd6f292c11362'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e75faf01e22ec7dc671640fa0e0968964fafd2fc'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/1bc83a019bbe268be3526406245ec28c2458a518'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/2aeb805a1bcd5f27c8c0d1a9d4d653f16d1506f4'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/6cbbe1ba76ee7e674a86abd43009b083a45838cb'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/7f609f630951b624348373cef99991ce08831927'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/9627fd0c6ea1c446741a33e67bc5709c59923827'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/9a3b90904d8a072287480eed4c3ece4b99d64f78'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/b58d0ac35f6d75ec1db8650a29dfd6f292c11362'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/e75faf01e22ec7dc671640fa0e0968964fafd2fc'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-265688.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
  - cve.org
epss: 0.0025
epssPercentile: 0.15352
ingestedAt: '2026-10-15T03:30:12.685Z'
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-09-10T15:41:11.412085Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: discard table flag update with pending basechain deletion

Hook unregistration is deferred to the commit phase, same occurs with
hook updates triggered by the table dormant flag. When both commands are
combined, this results in deleting a basechain while leaving its hook
still registered in the core.

## Affected

- `linux_kernel >= 5.4.262, < 5.4.274`
- `linux_kernel >= 5.10.202, < 5.10.215`
- `linux_kernel >= 5.13.1, < 5.15.155`
- `linux_kernel >= 5.16, < 6.1.86`
- `linux_kernel >= 6.2, < 6.6.26`
- `linux_kernel >= 6.7, < 6.8.5`
- `linux_kernel = 5.13`
- `linux_kernel = 6.9`
- `debian_linux = 10.0`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.8.5`