01 Record

CVE-2024-54031

netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.22% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 13.3% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-01-15 13:10Z1 YR AGO

Last updated

2026-05-11 20:53Z5 MO AGO

Reserved

2025-01-15

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-200Exposure of Sensitive Information to an Unauthorized ActorClass

Data version

5.2

Document digest

3d87d761d513e036034b2610d42a6171fac15e97d86ea2d5ef1188f6e0c2ef8d

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux98d62cf0e26305dd6a1932a4054004290f4194bb to < 352f8eaaabd008f09d1e176194edc261a7304084, e21855091f11df80d41239dbc5f8545b772c657d to < 6a14b46052eeb83175a95baf399283860b9d94c4, 59a59da8de47848575eedc141a74aae57696706d to < 277f00b0c2dca8794cf4837722960bdc4174911f, 23a6919bb3ecf6787f060476ee6810ad55ebf9c8 to < 607774a13764676d4b8be9c8b9c66b8cf3469043, 86c27603514cb8ead29857365cdd145404ee9706 to < 4f49349c1963e507aa37c1ec05178faeb0103959, be4d0ac67d92e6a285cd3eeb672188d249c121b2 to < d24cbc43cc7b41a0824b0bc6ec4d8436d8d7a9c0, 7ffc7481153bbabf3332c6a19b289730c7e1edf5 to < 542ed8145e6f9392e3d0a86a0e9027d2ffd183e4, 5.4.287 to < 5.4.289, 5.10.231 to < 5.10.233, 5.15.174 to < 5.15.176, 6.1.120 to < 6.1.124, 6.6.66 to < 6.6.70, 6.12.5 to < 6.12.9—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/352f8eaaabd008f09d1e176194edc261a7304084
git.kernel.orghttps://git.kernel.org/stable/c/6a14b46052eeb83175a95baf399283860b9d94c4
git.kernel.orghttps://git.kernel.org/stable/c/277f00b0c2dca8794cf4837722960bdc4174911f
git.kernel.orghttps://git.kernel.org/stable/c/607774a13764676d4b8be9c8b9c66b8cf3469043
git.kernel.orghttps://git.kernel.org/stable/c/4f49349c1963e507aa37c1ec05178faeb0103959
git.kernel.orghttps://git.kernel.org/stable/c/d24cbc43cc7b41a0824b0bc6ec4d8436d8d7a9c0
git.kernel.orghttps://git.kernel.org/stable/c/542ed8145e6f9392e3d0a86a0e9027d2ffd183e4
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.124-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.9-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.12.9-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.