CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.5. It affects Linux.
CVE
CVE-2024-40993
Severity
MEDIUM
CVSS
5.5
EPSS
0.28%
Linux
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix suspicious rcu_dereference_protected() When destroying all sets, we are either in pernet exit phase or are executing a "destroy all sets command" from userspace. The latter was taken into account in ip_set_dereference() (nfnetlink mutex is held), but the former was not. The patch adds the required check to rcu_dereference_protected() in ip_set_dereference().
Related CVEs
Other vulnerabilities affecting the same vendor(s)