Description
In the Linux kernel, the following vulnerability has been resolved:
netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
IDLETIMER revision 0 rules reuse existing timers by label and always call mod_timer() on timer->timer.
If the label was created first by revision 1 with XT_IDLETIMER_ALARM, the object uses alarm timer semantics and timer->timer is never initialized. Reusing that object from revision 0 causes mod_timer() on an uninitialized timer_list, triggering debugobjects warnings and possible panic when panic_on_warn=1.
Fix this by rejecting revision 0 rule insertion when an existing timer with the same label is of ALARM type.
Metrics
CVSS 3.1 7.8/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 68983a354a655c35d3fb204489d383a2a051fda7, < 32e937dc6e97f5ed3cdfe3fc0b2b19a05e23fa44; >= 68983a354a655c35d3fb204489d383a2a051fda7, < 144f88054ba0180467356f40895bd660b5dceeec; >= 68983a354a655c35d3fb204489d383a2a051fda7, < 28c7cfaf0c0ab17cbd7754092116fd1af45271f9; >= 68983a354a655c35d3fb204489d383a2a051fda7, < 54080355999381fed4a26129579a5765bab87491; >= 68983a354a655c35d3fb204489d383a2a051fda7, < 5e7ece24c5cb75a60402aad4d803c7898ea40aa9; >= 68983a354a655c35d3fb204489d383a2a051fda7, < f5ef97c13165542480a6ffdbe6f09f40bbb7cbf1; >= 68983a354a655c35d3fb204489d383a2a051fda7, < f228b9ae2a7e84d1153616d8e71c4236cb1f1309; >= 68983a354a655c35d3fb204489d383a2a051fda7, < 329f0b9b48ee6ab59d1ab72fef55fe8c6463a6cf |
| Linux | Linux | 5.7 |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | >= V3.1.6, < * |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | >= V3.1.5, < * |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | >= V3.1.7, < * |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | >= V3.1.6, < * |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | >= V3.1.5, < * |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | >= V3.1.7, < * |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | >= V3.1.6, < * |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | >= V3.1.5, < * |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | >= V3.1.7, < * |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | >= V3.1.6, < * |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | >= V3.1.5, < * |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | >= V3.1.7, < * |
| Siemens | SIMATIC S7-1500 TM MFP - GNU/Linux subsystem | < * |
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | >= V3.1.6, < * |
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | >= V3.1.5, < * |
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | >= V3.1.7, < * |
References
- https://git.kernel.org/stable/c/144f88054ba0180467356f40895bd660b5dceeecPatch
- https://git.kernel.org/stable/c/28c7cfaf0c0ab17cbd7754092116fd1af45271f9Patch
- https://git.kernel.org/stable/c/329f0b9b48ee6ab59d1ab72fef55fe8c6463a6cfPatch
- https://git.kernel.org/stable/c/32e937dc6e97f5ed3cdfe3fc0b2b19a05e23fa44Patch
- https://git.kernel.org/stable/c/54080355999381fed4a26129579a5765bab87491Patch
- https://git.kernel.org/stable/c/5e7ece24c5cb75a60402aad4d803c7898ea40aa9Patch
- https://git.kernel.org/stable/c/f228b9ae2a7e84d1153616d8e71c4236cb1f1309Patch
- https://git.kernel.org/stable/c/f5ef97c13165542480a6ffdbe6f09f40bbb7cbf1Patch
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html
Timeline
- Published
- Mar 20, 2026
- Last modified
- Nov 10, 2026
- NVD status
- Modified