CVE-2024-26642: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-26642 affects the Linux kernel's netfilter subsystem, specifically the nf_tables component. The vulnerability was discovered and disclosed on March 21, 2024, and involves an issue with anonymous sets with timeout flags in the netfilter framework. The vulnerability affects various versions of the Linux kernel (NVD).

The vulnerability exists in the nf_tables API where anonymous sets could be incorrectly configured with timeout flags. Anonymous sets are never used with timeout from userspace, and this combination should be rejected. The only exception to this rule is NFT_SET_EVAL to ensure legacy meters continue to work. The issue was fixed by adding validation checks to prevent the creation of anonymous sets with timeout flags (Kernel Commit).

While the exact impact is not explicitly stated in the sources, the vulnerability affects the netfilter subsystem which is responsible for packet filtering in Linux. The issue has been classified as a security vulnerability requiring patches across multiple Linux distributions (Red Hat Advisory).

The vulnerability has been patched in various Linux kernel versions. The fix involves adding validation checks to reject anonymous sets with timeout flags, except for NFT_SET_EVAL cases. Updates are available through distribution-specific security patches, including Red Hat Enterprise Linux and Debian (Red Hat Advisory, Debian Advisory).