CVE-2024-56637
—CVSS 3.1
4.7 medium
EPSS
<1%p7
Published
()
Modified
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Hold module reference while requesting a module User space may unload ip_set.ko while it is itself requesting a set type backend module, leading to a kernel crash. The race condition may be provoked by inserting an mdelay() right after the nfnl_unlock() call.
- Vendors
- linux
- Products
- linux kernel
- Weakness
- CWE-362
- Vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.