CVE-2024-26835

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: set dormant flag on hook register failure We need to set the dormant flag again if we fail to register the hooks. During memory pressure hook registration can fail and we end up with a table marked as active but no registered hooks. On table/base chain deletion, nf_tables will attempt to unregister the hook again which yields a warn splat from the nftables core.

CVSS 3.1

5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-25)

Published

2024-04-17

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

Affected

• debian:debian_linux
• linux:linux_kernel

References

• https://git.kernel.org/stable/c/0c9302a6da262e6ab6a6c1d30f04a6130ed97376
• https://git.kernel.org/stable/c/31ea574aeca1aa488e18716459bde057217637af
• https://git.kernel.org/stable/c/664264a5c55bf97a9c571c557d477b75416199be
• https://git.kernel.org/stable/c/6f2496366426cec18ba53f1c7f6c3ac307ca6a95
• https://git.kernel.org/stable/c/a6411f3c48f991c19aaf9a24fce36865fbba28d7

Check your stackJSON