Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-27417

ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() It seems that if userspace provides a correct IFA_TARGET_NETNSID value but no IFA_ADDRESS and IFA_LOCAL attributes, inet6_rtm_getaddr() returns -EINVAL with an elevated "struct net" refcount.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6ecf4c37eb3e89b0832c9616089a5cdca3747da7 to < 9d4ffb5b9d879a75e4f7460e8b10e756b4dfb132affected
  • 6ecf4c37eb3e89b0832c9616089a5cdca3747da7 to < 810fa7d5e5202fcfb22720304b755f1bdfd4c174affected
  • 6ecf4c37eb3e89b0832c9616089a5cdca3747da7 to < 8a54834c03c30e549c33d5da0975f3e1454ec906affected
  • 6ecf4c37eb3e89b0832c9616089a5cdca3747da7 to < 1b0998fdd85776775d975d0024bca227597e836aaffected
  • 6ecf4c37eb3e89b0832c9616089a5cdca3747da7 to < 44112bc5c74e64f28f5a9127dc34066c7a09bd0faffected
  • 6ecf4c37eb3e89b0832c9616089a5cdca3747da7 to < 33a1b6bfef6def2068c8703403759024ce17053eaffected
  • 6ecf4c37eb3e89b0832c9616089a5cdca3747da7 to < 10bfd453da64a057bcfd1a49fb6b271c48653cdbaffected

Linux Linux

Default version status: affected

  • 4.20affected
  • 0 to < 4.20unaffected
  • 5.4.271 to ≤ 5.4.*unaffected
  • 5.10.212 to ≤ 5.10.*unaffected
  • 5.15.151 to ≤ 5.15.*unaffected
  • 6.1.81 to ≤ 6.1.*unaffected
  • 6.6.21 to ≤ 6.6.*unaffected
  • 6.7.9 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References