Threats tagged 'ghsa-994f-f72h-4mcv'

CVE-2024-42109 is a medium-severity vulnerability in the Linux kernel's netfilter nf_tables subsystem. It involves a use-after-free condition caused by conditional flushing of pending work before a notifier, which can lead to a crash (denial of service). The issue arises because the notifier may not flush pending work unconditionally, allowing references to tables being removed to persist during transaction processing. This flaw was introduced with a specific commit related to transaction object handling in nf_tables.