Investigate in your agent.

Turn this advisory into a focused investigation. Ask your agent to check your project’s versions, explain the evidence, and suggest a compatible fix.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

Skip to content
cve.new Create a CVE report
Check your stack
CVE-2024-54683medium5.5

netfilter: IDLETIMER: Fix for possible ABBA deadlock

Impact

In the Linux kernel, the following vulnerability has been resolved:

Source excerpt · Linux

Affected packages

This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.

Affected products

Vendor version evidence. Product records are separate from automatic dependency matching.

Linux · Linux

Linux

4 ranges
Linux version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

0902b469bd25065aa0688c3cee6f11744c817e7c → before 5493d84a40f0e61da74e1b0db640845997836b4e

git versions

0902b469bd25065aa0688c3cee6f11744c817e7c → before 8c2c8445cda8f59c38dec7dc10509bcb23ae26a0

git versions

0902b469bd25065aa0688c3cee6f11744c817e7c → before 45fe76573a2557f632e248cc141342233f422b9a

git versions

0902b469bd25065aa0688c3cee6f11744c817e7c → before f36b01994d68ffc253c8296e2228dfe6e6431c03

git versions

unaffected

unknown

Other versions: unaffected

Linux · Linux

Linux

6 ranges
Linux version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

2.6.36

unaffected

0 → before 2.6.36

semver versions

6.1.191 → through 6.1.*

semver versions

6.6.67 → through 6.6.*

semver versions

6.12.6 → through 6.12.*

semver versions

6.13 → through *

original_commit_for_fix versions

unknown

Other versions: affected

Original source description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: IDLETIMER: Fix for possible ABBA deadlock

Deletion of the last rule referencing a given idletimer may happen at the same time as a read of its file in sysfs:

| ====================================================== | WARNING: possible circular locking dependency detected

6.12.0-rc7-01692-g5e9a28f41134-dirty #594 Not tainted
iptables/3303 is trying to acquire lock:
ffff8881057e04b8 (kn->active#48){++++}-{0:0}, at: __kernfs_remove+0x20
but task is already holding lock:
ffffffffa0249068 (list_mutex){+.+.}-{3:3}, at: idletimer_tg_destroy_v]
which lock already depends on the new lock.

A simple reproducer is:

| #!/bin/bash | | while true; do | iptables -A INPUT -i foo -j IDLETIMER --timeout 10 --label "testme" | iptables -D INPUT -i foo -j IDLETIMER --timeout 10 --label "testme" | done & | while true; do | cat /sys/class/xt_idletimer/timers/testme >/dev/null | done

Avoid this by freeing list_mutex right after deleting the element from the list, then continuing with the teardown.

Inside the record

Evidence available

Package identity · not supplied
Version evidence
Remediation guidance · not supplied
Weakness classification
Additional publishers

Describes the evidence in this view, not whether the product is safe.

Original records

CVE-2024-54683

View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.

cve.new JSON →

Underlying weaknesses

The source’s classification of what caused the vulnerability.

CWE-667 ↗

CWE-667 Improper Locking

CISA-ADP

Related →

Environment requirements

These conditions apply together as specified by the publisher. A matching product name alone does not establish exposure.

Linux · platform conditions

Any condition may hold

Vulnerable product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

From (inclusive): 2.6.36

Before: 6.1.191

Vulnerable product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

From (inclusive): 2.6.36

Before: 6.6.67

Vulnerable product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

From (inclusive): 2.6.36

Before: 6.12.6

Vulnerable product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

From (inclusive): 2.6.36

Before: 6.13

Original applicability statements
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "2.6.36",
            "versionEndExcluding": "6.1.191"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "2.6.36",
            "versionEndExcluding": "6.6.67"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "2.6.36",
            "versionEndExcluding": "6.12.6"
          },
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "2.6.36",
            "versionEndExcluding": "6.13"
          }
        ]
      }
    ]
  }
]
Contributing organizations · 2
Linux

Assigning organization

2026-10-30
CISA-ADP

Additional data publisher

2025-10-01

What changed

Follow changes
No substantive changes have been recorded here yet. History starts when cve.new observes a change after tracking is enabled; earlier edits are not reconstructed.

Large field values are marked as truncated previews. Original source snapshots remain retained.

References

4 sources
git.kernel.org/stable/c/5493d84a40f0e61da74e1b0db640845997836b4e
Source referenceLinux
git.kernel.org/stable/c/8c2c8445cda8f59c38dec7dc10509bcb23ae26a0
Source referenceLinux
git.kernel.org/stable/c/45fe76573a2557f632e248cc141342233f422b9a
Source referenceLinux
git.kernel.org/stable/c/f36b01994d68ffc253c8296e2228dfe6e6431c03
Source referenceLinux