CVE-2024-27017

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the netfilter component in the Linux kernel, specifically the nft set pipapo module. The generation mask can be updated while a netlink dump is in progress, causing the pipapo set backend walk iterator to fail in inferring the correct view of the data structure. To address this, notation has been added to specify whether the user intends to read or update the set. This change is based on a patch from Florian Westphal.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.