Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2024-44986

ipv6: fix possible UAF in ip6_finish_output2()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in ip6_finish_output2() If skb_expand_head() returns NULL, skb has been freed and associated dst/idev could also have been freed. We need to hold rcu_read_lock() to make sure the dst and associated idev are alive.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ded37d03440d0ab346a8287cc2ba88b8dc90ceb0 to < ae8512e93f4ce47614ca89defaec1b93e00697b8affected
  • 2323690eb05865a657709f4d28eb9538ea97bfc2 to < 1504108cb6020df7b1a31c9bb80fd587470aa448affected
  • 5796015fa968a3349027a27dcd04c71d95c53ba5 to < e891b36de161fcd96f12ff83667473e5067b9037affected
  • 5796015fa968a3349027a27dcd04c71d95c53ba5 to < 3574d28caf9a09756ae87ad1ea096c6f47b6101eaffected
  • 5796015fa968a3349027a27dcd04c71d95c53ba5 to < 6ab6bf731354a6fdbaa617d1ec194960db61cf3baffected
  • 5796015fa968a3349027a27dcd04c71d95c53ba5 to < 56efc253196751ece1fc535a5b582be127b0578aaffected
  • 5796015fa968a3349027a27dcd04c71d95c53ba5 to < da273b377ae0d9bd255281ed3c2adb228321687baffected
  • b34c668a867ffdcf8bd8db4a36512572e82b4a15affected
  • 5.4.137 to < 5.4.289affected
  • 5.10.55 to < 5.10.233affected
  • 5.13.7 to < 5.14affected

Linux Linux

Default version status: affected

  • 5.14affected
  • 0 to < 5.14unaffected
  • 5.4.289 to ≤ 5.4.*unaffected
  • 5.10.233 to ≤ 5.10.*unaffected
  • 5.15.166 to ≤ 5.15.*unaffected
  • 6.1.107 to ≤ 6.1.*unaffected
  • 6.6.48 to ≤ 6.6.*unaffected
  • 6.10.7 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References