Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-46677

gtp: fix a potential NULL pointer dereference

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfd_lookup() fails, gtp_encap_enable_socket() returns a NULL pointer, but its callers only check for error pointers thus miss the NULL pointer case. Fix it by returning an error pointer with the error code carried from sockfd_lookup(). (I found this bug during code inspection.)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9 to < 620fe9809752fae91b4190e897b81ed9976dfb39affected
  • 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9 to < bdd99e5f0ad5fa727b16f2101fe880aa2bff2f8eaffected
  • 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9 to < 8bbb9e4e0e66a39282e582d0440724055404b38caffected
  • 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9 to < 4643b91691e969b1b9ad54bf552d7a990cfa3b87affected
  • 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9 to < e8b9930b0eb045d19e883c65ff9676fc89320c70affected
  • 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9 to < 28c67f0f84f889fe9f4cbda8354132b20dc9212daffected
  • 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9 to < 612edd35f2a3910ab1f61c1f2338889d4ba99fa2affected
  • 1e3a3abd8b28cfda9d0d0167e50e0fe11bc372a9 to < defd8b3c37b0f9cb3e0f60f47d3d78d459d57fdaaffected

Linux Linux

Default version status: affected

  • 4.12affected
  • 0 to < 4.12unaffected
  • 4.19.321 to ≤ 4.19.*unaffected
  • 5.4.283 to ≤ 5.4.*unaffected
  • 5.10.225 to ≤ 5.10.*unaffected
  • 5.15.166 to ≤ 5.15.*unaffected
  • 6.1.108 to ≤ 6.1.*unaffected
  • 6.6.49 to ≤ 6.6.*unaffected
  • 6.10.8 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References