CVE-2024-54031

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74

Description The Linux kernel has a vulnerability in the netfilter module, specifically in the nft set hash function, where an unaligned atomic read on the struct nft set ext can occur. This happens when accessing the genmask field in the struct nft set ext, resulting in an unaligned atomic read. The issue can cause a kernel paging request error, leading to a system crash. To address this, the struct nft set ext needs to be aligned to the word size.

Recommendations Update to Linux kernel version 6.6.74 or later to fix the vulnerability. As a temporary workaround, consider aligning the struct nft set ext to the word size to prevent unaligned atomic reads.