Answer in brief
CVE-2024-35898 records a Unknown severity vulnerability in netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2024-35898 records a Unknown severity vulnerability in netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=3b49e2e94e6ebb8b23d0955d9e898254455734f8 <69d1fe14a680042ec913f22196b58e2c8ff1b007 || >=3b49e2e94e6ebb8b23d0955d9e898254455734f8 <a347bc8e6251eaee4b619da28020641eb5b0dd77 || >=3b49e2e94e6ebb8b23d0955d9e898254455734f8 <940d41caa71f0d3a52df2fde5fada524a993e331 || >=3b49e2e94e6ebb8b23d0955d9e898254455734f8 <2485bcfe05ee3cf9ca8923a94fa2e456924c79c8 || >=3b49e2e94e6ebb8b23d0955d9e898254455734f8 <9b5b7708ec2be21dd7ef8ca0e3abe4ae9f3b083b || >=3b49e2e94e6ebb8b23d0955d9e898254455734f8 <8b891153b2e4dc0ca9d9dab8f619d49c740813df || >=3b49e2e94e6ebb8b23d0955d9e898254455734f8 <e684b1674fd1ca4361812a491242ae871d6b2859 || >=3b49e2e94e6ebb8b23d0955d9e898254455734f8 <24225011d81b471acc0e1e315b7d9905459a6304 | 69d1fe14a680042ec913f22196b58e2c8ff1b007, a347bc8e6251eaee4b619da28020641eb5b0dd77, 940d41caa71f0d3a52df2fde5fada524a993e331, 2485bcfe05ee3cf9ca8923a94fa2e456924c79c8, 9b5b7708ec2be21dd7ef8ca0e3abe4ae9f3b083b, 8b891153b2e4dc0ca9d9dab8f619d49c740813df, e684b1674fd1ca4361812a491242ae871d6b2859, 24225011d81b471acc0e1e315b7d9905459a6304 |
| Linux/Linuxgeneric | 4.16 | Not reported |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <* | * |
Published upstream
May 19, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() nft_unregister_flowtable_type() within nf_flow_inet_module_exit() can concurrent with __nft_flowtable_type_get() within nf_tables_newflowtable(). And thhere is not any protection when iterate over nf_tables_flowtables list in __nft_flowtable_type_get(). Therefore, there is pertential data-race of nf_tables_flowtables list entry. Use list_for_each_entry_rcu() to iterate over nf_tables_flowtables list in __nft_flowtable_type_get(), and use rcu_read_lock() in the caller nft_flowtable_type_get() to protect the entire type query process.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=3b49e2e94e6ebb8b23d0955d9e898254455734f8 <69d1fe14a680042ec913f22196b58e2c8ff1b007 || >=3b49e2e94e6ebb8b23d0955d9e898254455734f8 <a347bc8e6251eaee4b619da28020641eb5b0dd77 || >=3b49e2e94e6ebb8b23d0955d9e898254455734f8 <940d41caa71f0d3a52df2fde5fada524a993e331 || >=3b49e2e94e6ebb8b23d0955d9e898254455734f8 <2485bcfe05ee3cf9ca8923a94fa2e456924c79c8 || >=3b49e2e94e6ebb8b23d0955d9e898254455734f8 <9b5b7708ec2be21dd7ef8ca0e3abe4ae9f3b083b || >=3b49e2e94e6ebb8b23d0955d9e898254455734f8 <8b891153b2e4dc0ca9d9dab8f619d49c740813df || >=3b49e2e94e6ebb8b23d0955d9e898254455734f8 <e684b1674fd1ca4361812a491242ae871d6b2859 || >=3b49e2e94e6ebb8b23d0955d9e898254455734f8 <24225011d81b471acc0e1e315b7d9905459a6304 | 69d1fe14a680042ec913f22196b58e2c8ff1b007, a347bc8e6251eaee4b619da28020641eb5b0dd77, 940d41caa71f0d3a52df2fde5fada524a993e331, 2485bcfe05ee3cf9ca8923a94fa2e456924c79c8, 9b5b7708ec2be21dd7ef8ca0e3abe4ae9f3b083b, 8b891153b2e4dc0ca9d9dab8f619d49c740813df, e684b1674fd1ca4361812a491242ae871d6b2859, 24225011d81b471acc0e1e315b7d9905459a6304 |
| Linux/Linuxgeneric | 4.16 | Not reported |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <* | * |
Published upstream
May 19, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() nft_unregister_flowtable_type() within nf_flow_inet_module_exit() can concurrent with __nft_flowtable_type_get() within nf_tables_newflowtable(). And thhere is not any protection when iterate over nf_tables_flowtables list in __nft_flowtable_type_get(). Therefore, there is pertential data-race of nf_tables_flowtables list entry. Use list_for_each_entry_rcu() to iterate over nf_tables_flowtables list in __nft_flowtable_type_get(), and use rcu_read_lock() in the caller nft_flowtable_type_get() to protect the entire type query process.
Quoted source text, attributed separately from HOL analysis.