VYPR
← All advisories
High severity7.8NVD Advisory· Published May 1, 2024· Updated May 12, 2026

CVE-2024-27065

CVE-2024-27065

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: do not compare internal table flags on updates

Restore skipping transaction if table update does not modify flags.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

In the Linux kernel, netfilter nf_tables incorrectly compares internal table flags on updates, causing unnecessary transaction aborts.

Vulnerability

Overview

CVE-2024-27065 is a vulnerability in the Linux kernel's netfilter nf_tables subsystem. The issue arises when updating tables: the kernel incorrectly compares internal table flags, which can cause the transaction to be aborted even when no flags have actually changed. This behavior deviates from the intended design that skips transactions for non-modifying updates.

Attack

Vector and Prerequisites

An attacker with the ability to issue nf_tables table updates (typically requiring CAP_NET_ADMIN privileges) can exploit this flaw. By sending update commands that do not modify flags, the attacker can trigger unnecessary transaction aborts, potentially leading to denial of service or resource exhaustion. No user interaction is required, but administrative access is necessary.

Impact

The primary impact is a denial of service condition. Repeatedly triggering transaction aborts can degrade system performance or cause instability in netfilter operations. The vulnerability does not directly allow privilege escalation or data leakage, but it can affect the availability of network filtering features.

Mitigation

A patch is available in the Linux kernel stable tree (commits [3] and [4]) that restores the correct behavior by skipping transactions when table flags are unchanged. Users should update their kernel to a patched version. Siemens has identified this CVE as affecting SIMATIC S7-1500 TM MFP with GNU/Linux subsystem [1]; affected users should apply the vendor's recommended remediation.

References
  1. SSA-265688
  2. Making sure you're not a bot!
  3. Making sure you're not a bot!

AI Insight generated on May 20, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

158

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

12

News mentions

0

No linked articles in our index yet.