Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
AV AC PR UI S C I A CVSS EPSS %ile KEV
L H L N U H N N 4.7 .0021 11.4 —
AFFECTED
Product Versions Fixed
Linux e50092404c1bc7aaeb0a0f4077fa6f07b073a20f – —
Linux 4.10 – 5.10.219
TIMELINE
Feb 19 Reserved by Linux
May 1 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2024-27019 (Linux). CVSS 7.8 → 4.7 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
nft_unregister_obj() can concurrent with __nft_obj_type_get(),
and there is not any protection when iterate over nf_tables_objects
list in __nft_obj_type_get(). Therefore, there is potential data-race
of nf_tables_objects list entry.
Use list_for_each_entry_rcu() to iterate over nf_tables_objects
list in __nft_obj_type_get(), and use rcu_read_lock() in the caller
nft_obj_type_get() to protect the entire type query process.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| February 19, 2024 | Reserved | Reserved by Linux |
| May 1, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-27019 (Linux). CVSS 7.8 → 4.7 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | e50092404c1bc7aaeb0a0f4077fa6f07b073a20f | — |
| Linux | Linux | — | 4.10 | 5.10.219 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-27019 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.