Review reviewHigh

CVE-2024-44985

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UAF in ip6_xmit() If skb_expand_head() returns NULL, skb has been freed and the associated dst/idev could also have been freed. We must use rcu_read_lock() to prevent a possible UAF.

CVSS: 7.8
EPSS: -
CISA KEV: Not listed
Published: 2024.09.05

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= 81d626b00bdba16504eeae9cc891b18e83a9471a < b3a3d5333c13a1be57499581eab4a8fc94d57f36, >= ee6b1db17f8287b615448488fc37f42bcfe9ece6 < c47e022011719fc5727bca661d662303180535ba, >= 0c9f227bee11910a49e1d159abe102d06e3745d5 < 975f764e96f71616b530e300c1bb2ac0ce0c2596, >= 0c9f227bee11910a49e1d159abe102d06e3745d5 < 38a21c026ed2cc7232414cb166efc1923f34af17, >= 0c9f227bee11910a49e1d159abe102d06e3745d5 < 124b428fe28064c809e4237b0b38e97200a8a4a8, >= 0c9f227bee11910a49e1d159abe102d06e3745d5 < fc88d6c1f2895a5775795d82ec581afdff7661d1, >= 0c9f227bee11910a49e1d159abe102d06e3745d5 < 2d5ff7e339d04622d8282661df36151906d0e1c7, >= 5.15, >= 5.15 < 5.15.166, >= 5.16 < 6.1.107, >= 6.2 < 6.6.48, >= 6.7 < 6.10.7, 6.11
Fixed versions: 5.15.166, 6.1.107, 6.6.48, 6.10.7

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-416