Answer in brief
CVE-2024-27020 records a Unknown severity vulnerability in netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/RUGGEDCOM RST2428P (generic), Siemens/SCALANCE XCM-/XRM-/XCH-/XRH-300 family (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/RUGGEDCOM RST2428P (generic), Siemens/SCALANCE XCM-/XRM-/XCH-/XRH-300 family (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=ef1f7df9170dbd875ce198ba84e6ab80f6fc139e <939109c0a8e2a006a6cc8209e262d25065f4403a || >=ef1f7df9170dbd875ce198ba84e6ab80f6fc139e <b38a133d37fa421c8447b383d788c9cc6f5cb34c || >=ef1f7df9170dbd875ce198ba84e6ab80f6fc139e <934e66e231cff2b18faa2c8aad0b8cec13957e05 || >=ef1f7df9170dbd875ce198ba84e6ab80f6fc139e <0b6de00206adbbfc6373b3ae38d2a6f197987907 || >=ef1f7df9170dbd875ce198ba84e6ab80f6fc139e <8d56bad42ac4c43c6c72ddd6a654a2628bf839c5 || >=ef1f7df9170dbd875ce198ba84e6ab80f6fc139e <a9ebf340d123ae12582210407f879d6a5a1bc25b || >=ef1f7df9170dbd875ce198ba84e6ab80f6fc139e <01f1a678b05ade4b1248019c2dcca773aebbeb7f || >=ef1f7df9170dbd875ce198ba84e6ab80f6fc139e <f969eb84ce482331a991079ab7a5c4dc3b7f89bf | 939109c0a8e2a006a6cc8209e262d25065f4403a, b38a133d37fa421c8447b383d788c9cc6f5cb34c, 934e66e231cff2b18faa2c8aad0b8cec13957e05, 0b6de00206adbbfc6373b3ae38d2a6f197987907, 8d56bad42ac4c43c6c72ddd6a654a2628bf839c5, a9ebf340d123ae12582210407f879d6a5a1bc25b, 01f1a678b05ade4b1248019c2dcca773aebbeb7f, f969eb84ce482331a991079ab7a5c4dc3b7f89bf |
| Linux/Linuxgeneric | 3.13 | Not reported |
| Siemens/RUGGEDCOM RST2428Pgeneric | >=0 <V3.1 | V3.1 |
| Siemens/SCALANCE XCM-/XRM-/XCH-/XRH-300 familygeneric | >=0 <V3.1 | V3.1 |
| Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.0 <V3.1.5 | V3.1.5 |
| Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPgeneric | >=V3.1.0 <V3.1.5 | V3.1.5 |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <* | * |
| Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.0 <V3.1.5 | V3.1.5 |
Published upstream
May 1, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() nft_unregister_expr() can concurrent with __nft_expr_type_get(), and there is not any protection when iterate over nf_tables_expressions list in __nft_expr_type_get(). Therefore, there is potential data-race of nf_tables_expressions list entry. Use list_for_each_entry_rcu() to iterate over nf_tables_expressions list in __nft_expr_type_get(), and use rcu_read_lock() in the caller nft_expr_type_get() to protect the entire type query process.
Quoted source text, attributed separately from HOL analysis.