Answer in brief
CVE-2024-26925 records a Unknown severity vulnerability in netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/RUGGEDCOM RM1224 LTE(4G) EU (generic), Siemens/RUGGEDCOM RM1224 LTE(4G) NAM (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2024-26925 records a Unknown severity vulnerability in netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/RUGGEDCOM RM1224 LTE(4G) EU (generic), Siemens/RUGGEDCOM RM1224 LTE(4G) NAM (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/RUGGEDCOM RM1224 LTE(4G) EU (generic), Siemens/RUGGEDCOM RM1224 LTE(4G) NAM (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=4b6346dc1edfb9839d6edee7360ed31a22fa6c95 <61ac7284346c32f9a8c8ceac56102f7914060428 || >=23292bdfda5f04e704a843b8f97b0eb95ace1ca6 <2cee2ff7f8cce12a63a0a23ffe27f08d99541494 || >=b44a459c6561595ed7c3679599c5279204132b33 <eb769ff4e281f751adcaf4f4445cbf30817be139 || >=5d319f7a81431c6bb32eb4dc7d7975f99e2c8c66 <8d3a58af50e46167b6f1db47adadad03c0045dae || >=720344340fb9be2765bbaab7b292ece0a4570eae <8038ee3c3e5b59bcd78467686db5270c68544e30 || >=720344340fb9be2765bbaab7b292ece0a4570eae <a34ba4bdeec0c3b629160497594908dc820110f1 || >=720344340fb9be2765bbaab7b292ece0a4570eae <0d459e2ffb541841714839e8228b845458ed3b27 || f85ca36090cbb252bcbc95fc74c2853fc792694f || e07e68823116563bdbc49cef185cda6f463bc534 || >=5.4.262 <5.4.274 || >=5.10.198 <5.10.215 || >=5.15.134 <5.15.155 || >=6.1.56 <6.1.86 || >=4.19.316 <4.20 || >=6.4.13 <6.5 | 61ac7284346c32f9a8c8ceac56102f7914060428, 2cee2ff7f8cce12a63a0a23ffe27f08d99541494, eb769ff4e281f751adcaf4f4445cbf30817be139, 8d3a58af50e46167b6f1db47adadad03c0045dae, 8038ee3c3e5b59bcd78467686db5270c68544e30, a34ba4bdeec0c3b629160497594908dc820110f1, 0d459e2ffb541841714839e8228b845458ed3b27, 5.4.274, 5.10.215, 5.15.155, 6.1.86, 4.20, 6.5 |
| Linux/Linuxgeneric | 6.5 | Not reported |
| Siemens/RUGGEDCOM RM1224 LTE(4G) EUgeneric | >=0 <V8.2 | V8.2 |
| Siemens/RUGGEDCOM RM1224 LTE(4G) NAMgeneric | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M804PBgeneric | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M812-1 ADSL-Routergeneric | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M816-1 ADSL-Routergeneric | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M826-2 SHDSL-Routergeneric | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M874-2generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M874-3generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M874-3 3G-Router (CN)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M876-3generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M876-3 (ROK)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M876-4generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M876-4 (EU)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M876-4 (NAM)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE MUM853-1 (A1)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE MUM853-1 (B1)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE MUM853-1 (EU)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE MUM856-1 (A1)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE MUM856-1 (B1)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE MUM856-1 (CN)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE MUM856-1 (EU)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE MUM856-1 (RoW)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE S615 EEC LAN-Routergeneric | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE S615 LAN-Routergeneric | >=0 <V8.2 | V8.2 |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <* | * |
Published upstream
Apr 24, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path The commit mutex should not be released during the critical section between nft_gc_seq_begin() and nft_gc_seq_end(), otherwise, async GC worker could collect expired objects and get the released commit lock within the same GC sequence. nf_tables_module_autoload() temporarily releases the mutex to load module dependencies, then it goes back to replay the transaction again. Move it at the end of the abort phase after nft_gc_seq_end() is called.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/RUGGEDCOM RM1224 LTE(4G) EU (generic), Siemens/RUGGEDCOM RM1224 LTE(4G) NAM (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=4b6346dc1edfb9839d6edee7360ed31a22fa6c95 <61ac7284346c32f9a8c8ceac56102f7914060428 || >=23292bdfda5f04e704a843b8f97b0eb95ace1ca6 <2cee2ff7f8cce12a63a0a23ffe27f08d99541494 || >=b44a459c6561595ed7c3679599c5279204132b33 <eb769ff4e281f751adcaf4f4445cbf30817be139 || >=5d319f7a81431c6bb32eb4dc7d7975f99e2c8c66 <8d3a58af50e46167b6f1db47adadad03c0045dae || >=720344340fb9be2765bbaab7b292ece0a4570eae <8038ee3c3e5b59bcd78467686db5270c68544e30 || >=720344340fb9be2765bbaab7b292ece0a4570eae <a34ba4bdeec0c3b629160497594908dc820110f1 || >=720344340fb9be2765bbaab7b292ece0a4570eae <0d459e2ffb541841714839e8228b845458ed3b27 || f85ca36090cbb252bcbc95fc74c2853fc792694f || e07e68823116563bdbc49cef185cda6f463bc534 || >=5.4.262 <5.4.274 || >=5.10.198 <5.10.215 || >=5.15.134 <5.15.155 || >=6.1.56 <6.1.86 || >=4.19.316 <4.20 || >=6.4.13 <6.5 | 61ac7284346c32f9a8c8ceac56102f7914060428, 2cee2ff7f8cce12a63a0a23ffe27f08d99541494, eb769ff4e281f751adcaf4f4445cbf30817be139, 8d3a58af50e46167b6f1db47adadad03c0045dae, 8038ee3c3e5b59bcd78467686db5270c68544e30, a34ba4bdeec0c3b629160497594908dc820110f1, 0d459e2ffb541841714839e8228b845458ed3b27, 5.4.274, 5.10.215, 5.15.155, 6.1.86, 4.20, 6.5 |
| Linux/Linuxgeneric | 6.5 | Not reported |
| Siemens/RUGGEDCOM RM1224 LTE(4G) EUgeneric | >=0 <V8.2 | V8.2 |
| Siemens/RUGGEDCOM RM1224 LTE(4G) NAMgeneric | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M804PBgeneric | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M812-1 ADSL-Routergeneric | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M816-1 ADSL-Routergeneric | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M826-2 SHDSL-Routergeneric | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M874-2generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M874-3generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M874-3 3G-Router (CN)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M876-3generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M876-3 (ROK)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M876-4generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M876-4 (EU)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE M876-4 (NAM)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE MUM853-1 (A1)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE MUM853-1 (B1)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE MUM853-1 (EU)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE MUM856-1 (A1)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE MUM856-1 (B1)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE MUM856-1 (CN)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE MUM856-1 (EU)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE MUM856-1 (RoW)generic | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE S615 EEC LAN-Routergeneric | >=0 <V8.2 | V8.2 |
| Siemens/SCALANCE S615 LAN-Routergeneric | >=0 <V8.2 | V8.2 |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <* | * |
Published upstream
Apr 24, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path The commit mutex should not be released during the critical section between nft_gc_seq_begin() and nft_gc_seq_end(), otherwise, async GC worker could collect expired objects and get the released commit lock within the same GC sequence. nf_tables_module_autoload() temporarily releases the mutex to load module dependencies, then it goes back to replay the transaction again. Move it at the end of the abort phase after nft_gc_seq_end() is called.
Quoted source text, attributed separately from HOL analysis.