5.5

CVE-2026-43024

netfilter: nf_tables: reject immediate NF_QUEUE verdict

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: reject immediate NF_QUEUE verdict

nft_queue is always used from userspace nftables to deliver the NF_QUEUE
verdict. Immediately emitting an NF_QUEUE verdict is never used by the
userspace nft tools, so reject immediate NF_QUEUE verdicts.

The arp family does not provide queue support, but such an immediate
verdict is still reachable. Globally reject NF_QUEUE immediate verdicts
to address this issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.19.307 < 4.20
Linux ≫ Linux Kernel Version >= 5.4.269 < 5.5
Linux ≫ Linux Kernel Version >= 5.10.210 < 5.10.253
Linux ≫ Linux Kernel Version >= 5.15.149 < 5.15.203
Linux ≫ Linux Kernel Version >= 6.1.76 < 6.1.168
Linux ≫ Linux Kernel Version >= 6.6.15 < 6.6.134
Linux ≫ Linux Kernel Version >= 6.7.3 < 6.8
Linux ≫ Linux Kernel Version >= 6.8.1 < 6.12.81
Linux ≫ Linux Kernel Version >= 6.13 < 6.18.22
Linux ≫ Linux Kernel Version >= 6.19 < 6.19.12
Linux ≫ Linux Kernel Version6.8 Update-
Linux ≫ Linux Kernel Version6.8 Updaterc2
Linux ≫ Linux Kernel Version6.8 Updaterc3
Linux ≫ Linux Kernel Version6.8 Updaterc4
Linux ≫ Linux Kernel Version6.8 Updaterc5
Linux ≫ Linux Kernel Version6.8 Updaterc6
Linux ≫ Linux Kernel Version6.8 Updaterc7
Linux ≫ Linux Kernel Version7.0 Updaterc1
Linux ≫ Linux Kernel Version7.0 Updaterc2
Linux ≫ Linux Kernel Version7.0 Updaterc3
Linux ≫ Linux Kernel Version7.0 Updaterc4
Linux ≫ Linux Kernel Version7.0 Updaterc5
Linux ≫ Linux Kernel Version7.0 Updaterc6
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.024
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/2f7f825a548be55420f0f5f716f6c27b9d312d3f
Patch
https://git.kernel.org/stable/c/f140593901724cfbd16597c3a4fcb24a58ae44b0
Patch
https://git.kernel.org/stable/c/68390437a998c3f2c57212b413abef5e6d657d88
Patch
https://git.kernel.org/stable/c/4b12a3cc3f075e750cc3c5e693fd25fb400af4a2
Patch
https://git.kernel.org/stable/c/f710691be163ae6b39e4bcab9e5be32d329f035b
Patch
https://git.kernel.org/stable/c/42a47f4b1b7695026ab9bc1bb35d4622b0835c95
Patch
https://git.kernel.org/stable/c/17dc5d5a935c771338430cbc156a16a51cfd31e8
Patch
https://git.kernel.org/stable/c/da107398cbd4bbdb6bffecb2ce86d5c9384f4cec
Patch