CVE-2024-35900

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: reject new basechain after table flag update

The Linux kernel CVE team has assigned CVE-2024-35900 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051952-CVE-2024-35900-c2c9@gregkh/T

This vulnerability is rated with a Low severity because exploiting it requires local privileges to configure netfilter tables, typically necessitating CAP_NET_ADMIN privileges or access to unprivileged user namespaces. Under standard Red Hat Enterprise Linux deployments, an attacker can only trigger a non-fatal kernel warning when attempting to unregister an already unregistered base chain on a dormant table, posing minimal threat to system stability. In default configurations where kernel panic-on-warn is disabled, the flaw does not lead to code execution or complete system compromise.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.