CVE-2024-27012

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: restore set elements when delete set fails

The Linux kernel CVE team has assigned CVE-2024-27012 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050148-CVE-2024-27012-5564@gregkh/T

This vulnerability is rated as Low severity because triggering the flaw requires local privileges to manage nftables rulesets, and an aborted set deletion results primarily in kernel memory leaks or warning splats rather than privilege escalation. On default Red Hat Enterprise Linux deployments, access to the netfilter subsystem is restricted to administrative users or bounded within user namespaces. As a result, the risk is confined to localized resource consumption and potential denial of service under specific error-handling conditions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.