CVE-2024-26808

Name of the Vulnerable Software and Affected Versions Linux kernel versions from v5.9 to v6.6

Description The issue is related to a use-after-free vulnerability in the Netfilter component of the Linux kernel, specifically in the nft chain filter function. This vulnerability can lead to a local privilege escalation. The problem arises when a stale reference to a netdevice remains in the hook list after a NETDEV UNREGISTER event is reported.

Recommendations As a temporary workaround, consider disabling the nft chain filter function until a patch is available. Restrict access to the Netfilter component to minimize the risk of exploitation. Update to a version of the Linux kernel that has the fix for the netfilter: nft chain filter: handle NETDEV UNREGISTER for inet/ingress basechain issue.