{"id":"CVE-2024-54683","aliases":[],"cve":{"records":[{"id":"CVE-2024-54683","source":"Linux","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2025-01-09T09:49:29.693Z","published":"2025-01-11T12:29:54.407Z","modified":"2026-10-30T12:20:16.039Z"}],"publishers":[{"name":"Linux","role":"CNA","organizationId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","modified":"2026-10-30T12:20:16.039Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2025-10-01T19:57:21.581Z"}],"references":[{"url":"https://git.kernel.org/stable/c/5493d84a40f0e61da74e1b0db640845997836b4e","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/8c2c8445cda8f59c38dec7dc10509bcb23ae26a0","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/45fe76573a2557f632e248cc141342233f422b9a","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/f36b01994d68ffc253c8296e2228dfe6e6431c03","tags":[],"source":"Linux"}],"weaknesses":[{"id":"CWE-667","description":"CWE-667 Improper Locking","source":"CISA-ADP"}],"applicability":[{"source":"Linux","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.36","versionEndExcluding":"6.1.191"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.36","versionEndExcluding":"6.6.67"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.36","versionEndExcluding":"6.12.6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.36","versionEndExcluding":"6.13"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2025-10-01T19:55:27.468543Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"netfilter: IDLETIMER: Fix for possible ABBA deadlock","titleSource":"Linux","descriptionSource":"Linux","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: IDLETIMER: Fix for possible ABBA deadlock\n\nDeletion of the last rule referencing a given idletimer may happen at\nthe same time as a read of its file in sysfs:\n\n| ======================================================\n| WARNING: possible circular locking dependency detected\n| 6.12.0-rc7-01692-g5e9a28f41134-dirty #594 Not tainted\n| ------------------------------------------------------\n| iptables/3303 is trying to acquire lock:\n| ffff8881057e04b8 (kn->active#48){++++}-{0:0}, at: __kernfs_remove+0x20\n|\n| but task is already holding lock:\n| ffffffffa0249068 (list_mutex){+.+.}-{3:3}, at: idletimer_tg_destroy_v]\n|\n| which lock already depends on the new lock.\n\nA simple reproducer is:\n\n| #!/bin/bash\n|\n| while true; do\n|         iptables -A INPUT -i foo -j IDLETIMER --timeout 10 --label \"testme\"\n|         iptables -D INPUT -i foo -j IDLETIMER --timeout 10 --label \"testme\"\n| done &\n| while true; do\n|         cat /sys/class/xt_idletimer/timers/testme >/dev/null\n| done\n\nAvoid this by freeing list_mutex right after deleting the element from\nthe list, then continuing with the teardown.","score":5.5,"severity":"medium","published":"2025-01-11T12:29:54.407Z","modified":"2026-10-30T12:20:16.039Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Linux","name":"Linux","platforms":[],"versions":[{"version":"0902b469bd25065aa0688c3cee6f11744c817e7c","status":"affected","lessThan":"5493d84a40f0e61da74e1b0db640845997836b4e","versionType":"git"},{"version":"0902b469bd25065aa0688c3cee6f11744c817e7c","status":"affected","lessThan":"8c2c8445cda8f59c38dec7dc10509bcb23ae26a0","versionType":"git"},{"version":"0902b469bd25065aa0688c3cee6f11744c817e7c","status":"affected","lessThan":"45fe76573a2557f632e248cc141342233f422b9a","versionType":"git"},{"version":"0902b469bd25065aa0688c3cee6f11744c817e7c","status":"affected","lessThan":"f36b01994d68ffc253c8296e2228dfe6e6431c03","versionType":"git"}],"defaultStatus":"unaffected","cpes":[],"source":"Linux","url":"https://www.cve.org/CVERecord?id=CVE-2024-54683"},{"vendor":"Linux","name":"Linux","platforms":[],"versions":[{"version":"2.6.36","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.36","versionType":"semver"},{"version":"6.1.191","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.67","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.6","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.13","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"defaultStatus":"affected","cpes":[],"source":"Linux","url":"https://www.cve.org/CVERecord?id=CVE-2024-54683"}],"remediation":[],"references":["https://git.kernel.org/stable/c/5493d84a40f0e61da74e1b0db640845997836b4e","https://git.kernel.org/stable/c/8c2c8445cda8f59c38dec7dc10509bcb23ae26a0","https://git.kernel.org/stable/c/45fe76573a2557f632e248cc141342233f422b9a","https://git.kernel.org/stable/c/f36b01994d68ffc253c8296e2228dfe6e6431c03"],"sources":[{"name":"CVE","id":"CVE-2024-54683","modified":"2026-10-30T12:20:16.039Z","url":"https://www.cve.org/CVERecord?id=CVE-2024-54683"}],"assessments":[{"source":"CISA-ADP","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","score":5.5}],"sourceAffected":[],"observedAt":"2026-10-30T12:35:17.035Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T09:10:30.844Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":null}