CVE-2024-26581

HIGH
Published Feb 20, 2024 Modified Oct 1, 2025

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval elements that are not yet active.

Is your site exposed to CVE-2024-26581?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor Product
debian debian_linux
linux linux_kernel
linux linux_kernel
linux linux_kernel
linux linux_kernel
linux linux_kernel
linux linux_kernel

References

Advisories & Patches

https://git.kernel.org/stable/c/10e9cb39313627f2eae4cd70c4b742074e998fd8 https://git.kernel.org/stable/c/1296c110c5a0b45a8fcf58e7d18bc5da61a565cb https://git.kernel.org/stable/c/2bab493a5624444ec6e648ad0d55a362bcb4c003 https://git.kernel.org/stable/c/4cee42fcf54fec46b344681e7cc4f234bb22f85a https://git.kernel.org/stable/c/60c0c230c6f046da536d3df8b39a20b9a9fd6af0 https://git.kernel.org/stable/c/6eb14441f10602fa1cf691da9d685718b68b78a9 https://git.kernel.org/stable/c/b734f7a47aeb32a5ba298e4ccc16bb0c52b6dbf7 https://git.kernel.org/stable/c/c60d252949caf9aba537525195edae6bbabc35eb https://git.kernel.org/stable/c/10e9cb39313627f2eae4cd70c4b742074e998fd8 https://git.kernel.org/stable/c/1296c110c5a0b45a8fcf58e7d18bc5da61a565cb https://git.kernel.org/stable/c/2bab493a5624444ec6e648ad0d55a362bcb4c003 https://git.kernel.org/stable/c/4cee42fcf54fec46b344681e7cc4f234bb22f85a https://git.kernel.org/stable/c/60c0c230c6f046da536d3df8b39a20b9a9fd6af0 https://git.kernel.org/stable/c/6eb14441f10602fa1cf691da9d685718b68b78a9 https://git.kernel.org/stable/c/b734f7a47aeb32a5ba298e4ccc16bb0c52b6dbf7 https://git.kernel.org/stable/c/c60d252949caf9aba537525195edae6bbabc35eb

Frequently Asked Questions

What is CVE-2024-26581? +
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval elements that are not yet active. It has a CVSS v3.1 base score of 7.8 (HIGH).
How severe is CVE-2024-26581? +
CVE-2024-26581 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2024-26581? +
CVE-2024-26581 affects products from debian, linux, specifically: debian_linux, linux_kernel. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-26581? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-24201 10.0

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, …
CVE-2025-32433 10.0

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH …
CVE-2024-42472 10.0

Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak …
CVE-2025-49113 9.9

Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the _from parameter in …
CVE-2024-49369 9.8

Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data …
CVE-2024-47606 9.8

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extension …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-26581 — free, no signup required.