netfilter: nf_tables: revert commit_mutex usage in reset path
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.6.160, 6.2, 6.12.101, 6.18.42, 6.19.4
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: revert commit_mutex usage in reset path It causes circular lock dependency between commit_mutex, nfnl_subsys_ipset and nlk_cb_mutex when nft reset, ipset list, and iptables-nft with '-m set' rule run at the same time. Previous patches made it safe to run individual reset handlers concurrently so commit_mutex is no longer required to prevent this.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From f123293db16dcd0cd81b246ae60e6362f0025d0a · fixed in b0dd8637fbaae8405eb9e8de741f9ce7c9667b6f; From 3cb03edb4de33fd04c4ea55f47397b96a8657c53 · fixed in d66bedfe97a2bc321fa8118e669aae988038f729; From 3cb03edb4de33fd04c4ea55f47397b96a8657c53 · fixed in f6410d18c1e2da325df02be989d5bca5ed38b086; From 3cb03edb4de33fd04c4ea55f47397b96a8657c53 · fixed in ee3978b6a0dcd4215cb7cedcba705a12174786a7; From 3cb03edb4de33fd04c4ea55f47397b96a8657c53 · fixed in 7f261bb906bf527c4a6e2a646e2d5f3679f2a8bc; From 6.6.48 · fixed in 6.6.160; From 6.1.107 · fixed in 6.2
- Linux Linux
6.7
- KernelLinux
fixed in 6.6.160; From 6.7.0 · fixed in 6.12.101; fixed in 6.18.42; From 6.13.0 · fixed in 6.19.4