01 Record

CVE-2024-56637

netfilter: ipset: Hold module reference while requesting a module

HighPUBLISHEDCNA: Linux

CNA base score7.3 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

View raw JSON

02 Description

netfilter: ipset: Hold module reference while requesting a module

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.18% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 7.5% of scored records. A rank, not a probability.
NVD base score: 4.7 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-08-04.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-12-27 15:02Z1 YR AGO

Last updated

2026-08-05 11:45Z1 MO AGO

Reserved

2024-12-27

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.3)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Class

Data version

5.2

Document digest

92e4081a550ae12f443a627489707bfe3a840e005fbca1b701281a3bded9c1eb

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxa7b4f989a629493bb4ec4a354def784d440b32c4 to < e5e2d3024753fdaca818b822e3827614bacbdccf, a7b4f989a629493bb4ec4a354def784d440b32c4 to < 6099b5d3e37145484fac4b8b4070c3f1abfb3519, a7b4f989a629493bb4ec4a354def784d440b32c4 to < 0e67805e805c1f3edd6f43adbe08ea14b552694b, a7b4f989a629493bb4ec4a354def784d440b32c4 to < 5bae60a933ba5d16eed55c6b279be51bcbbc79b0, a7b4f989a629493bb4ec4a354def784d440b32c4 to < 90bf312a6b6b3d6012137f6776a4052ee85e0340, a7b4f989a629493bb4ec4a354def784d440b32c4 to < ba5e070f36682d07ca7ad2a953e6c9d96be19dca, a7b4f989a629493bb4ec4a354def784d440b32c4 to < 456f010bfaefde84d3390c755eedb1b0a5857c3c, 2.6.39—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/e5e2d3024753fdaca818b822e3827614bacbdccf
git.kernel.orghttps://git.kernel.org/stable/c/6099b5d3e37145484fac4b8b4070c3f1abfb3519
git.kernel.orghttps://git.kernel.org/stable/c/0e67805e805c1f3edd6f43adbe08ea14b552694b
git.kernel.orghttps://git.kernel.org/stable/c/5bae60a933ba5d16eed55c6b279be51bcbbc79b0
git.kernel.orghttps://git.kernel.org/stable/c/90bf312a6b6b3d6012137f6776a4052ee85e0340
git.kernel.orghttps://git.kernel.org/stable/c/ba5e070f36682d07ca7ad2a953e6c9d96be19dca
git.kernel.orghttps://git.kernel.org/stable/c/456f010bfaefde84d3390c755eedb1b0a5857c3c
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

01 Record index

CVE-2024-56637

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-56637

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References