Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-44986

ipv6: fix possible UAF in ip6_finish_output2()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.4.289, 5.10.233, 5.14, 5.15.166, 6.1.107, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in ip6_finish_output2() If skb_expand_head() returns NULL, skb has been freed and associated dst/idev could also have been freed. We need to hold rcu_read_lock() to make sure the dst and associated idev are alive.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From ded37d03440d0ab346a8287cc2ba88b8dc90ceb0 · fixed in ae8512e93f4ce47614ca89defaec1b93e00697b8; From 2323690eb05865a657709f4d28eb9538ea97bfc2 · fixed in 1504108cb6020df7b1a31c9bb80fd587470aa448; From 5796015fa968a3349027a27dcd04c71d95c53ba5 · fixed in e891b36de161fcd96f12ff83667473e5067b9037; From 5796015fa968a3349027a27dcd04c71d95c53ba5 · fixed in 3574d28caf9a09756ae87ad1ea096c6f47b6101e; From 5796015fa968a3349027a27dcd04c71d95c53ba5 · fixed in 6ab6bf731354a6fdbaa617d1ec194960db61cf3b; From 5796015fa968a3349027a27dcd04c71d95c53ba5 · fixed in 56efc253196751ece1fc535a5b582be127b0578a; From 5796015fa968a3349027a27dcd04c71d95c53ba5 · fixed in da273b377ae0d9bd255281ed3c2adb228321687b; From 5.4.137 · fixed in 5.4.289; From 5.10.55 · fixed in 5.10.233; From 5.13.7 · fixed in 5.14

  • Linux Linux

    5.14

  • KernelLinux

    fixed in 5.4.289; From 5.5.0 · fixed in 5.10.233; From 5.11.0 · fixed in 5.15.166; From 5.14.0 · fixed in 6.1.107; From 5.16.0 · fixed in 6.6.48; From 6.2.0 · fixed in 6.10.7

References 7

git.kernel.org