High 7.8Published May 1, 2024

CVE-2024-27065netfilter: nf_tables: do not compare internal table flags on updates

Updated under an hour ago (Oct 27, 2026, 2:30 PM ET)

Does this affect you?

It affects Linux and 6 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not compare internal table flags on updates Restore skipping transaction if table update does not modify flags.

CVSS: 7.8 HIGH (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from bf8083bbf8fa202e6e5316bbd99759ab82bfe7a3 before 845083249d6a392f3a88804e1669bdb936ee129f; from e10f661adc556c4969c70ddaddf238bffdaf1e87 before 2531f907d3e40a6173090f10670ae76d117ab27b; from d9c4da8cb74e8ee6e58a064a3573aa37acf6c935 before fcf32a5bfcb8a57ac0ce717fcfa4d688c91f1005; from 179d9ba5559a756f4322583388b3213fe4e391b0 before 640dbf688ba955e83e03de84fbdda8e570b7cce4; from 179d9ba5559a756f4322583388b3213fe4e391b0 before 9683cb6c2c6c0f45537bf0b8868b5d38fcb63fc7; 179d9ba5559a756f4322583388b3213fe4e391b0 builds before 4d37f12707ee965d338028732575f0b85f6d9e4f; from 179d9ba5559a756f4322583388b3213fe4e391b0 before 3443e57654f90c9a843ab6a6040c10709fd033aa; from 179d9ba5559a756f4322583388b3213fe4e391b0 before df257c435e51651c43b86326d112ddadda76350e; and 3 more ranges	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
linux linux_kernel linux:linux_kernel	from 5.4.262 before 5.4.273; from 5.10.202 before 5.10.214; from 5.13.1 before 5.15.153; from 5.16 before 6.1.83; from 6.2 before 6.6.23; from 6.7 before 6.7.11; from 6.8 before 6.8.2; 5.13; and 3 more ranges	NVD
debian debian_linux debian:debian_linux	10.0	NVD

References

References

https://git.kernel.org/stable/c/845083249d6a392f3a88804e1669bdb936ee129f	patch
https://git.kernel.org/stable/c/2531f907d3e40a6173090f10670ae76d117ab27b	patch
https://git.kernel.org/stable/c/fcf32a5bfcb8a57ac0ce717fcfa4d688c91f1005	patch
https://git.kernel.org/stable/c/640dbf688ba955e83e03de84fbdda8e570b7cce4	patch
https://git.kernel.org/stable/c/9683cb6c2c6c0f45537bf0b8868b5d38fcb63fc7	patch
https://git.kernel.org/stable/c/4d37f12707ee965d338028732575f0b85f6d9e4f	patch
https://git.kernel.org/stable/c/3443e57654f90c9a843ab6a6040c10709fd033aa	patch
https://git.kernel.org/stable/c/df257c435e51651c43b86326d112ddadda76350e	patch
https://git.kernel.org/stable/c/4a0e7f2decbf9bd72461226f1f5f7dcc4b08f139	patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html	mailing-list, third-party-advisory
1–10 of 12

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.