CVE-2024-35897

This CVE involves a flaw in the Linux kernel's nf_tables component, part of the Netfilter framework used for packet filtering and firewall functionalities. The vulnerability arises when a table's dormant flag is updated while there's a pending deletion of a base chain. In such cases, the unregistration of hooks is deferred until the commit phase. If both operations—updating the dormant flag and deleting the base chain—are combined, it can result in the base chain being deleted while its hook remains registered in the core system. This inconsistency may lead to unexpected behavior or potential security risks.

This vulnerability is rated as Moderate severity because exploitation requires local administrative capabilities, limiting the blast radius to a local denial of service rather than arbitrary remote compromise. In standard Red Hat Enterprise Linux deployments, nf_tables configuration is restricted to privileged users or containers with network administration permissions. An attacker must execute specific table state modifications concurrently with chain removals to induce a dangling hook condition, resulting in a kernel panic without impacting data confidentiality.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.