CVE-2024-44986

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in ip6_finish_output2() If skb_expand_head() returns NULL, skb has been freed and associated dst/idev could also have been freed. We need to hold rcu_read_lock() to make sure the dst and associated idev are alive.

Affected product and versions

Product

Linux Linux, debian linux, linux kernel

Affected versions

>= 5796015fa968a3349027a27dcd04c71d95c53ba5 < e891b36de161fcd96f12ff83667473e5067b9037, >= 5796015fa968a3349027a27dcd04c71d95c53ba5 < 3574d28caf9a09756ae87ad1ea096c6f47b6101e, >= 5796015fa968a3349027a27dcd04c71d95c53ba5 < 6ab6bf731354a6fdbaa617d1ec194960db61cf3b, >= 5796015fa968a3349027a27dcd04c71d95c53ba5 < 56efc253196751ece1fc535a5b582be127b0578a, >= 5796015fa968a3349027a27dcd04c71d95c53ba5 < da273b377ae0d9bd255281ed3c2adb228321687b, >= ded37d03440d0ab346a8287cc2ba88b8dc90ceb0, >= 2323690eb05865a657709f4d28eb9538ea97bfc2, >= b34c668a867ffdcf8bd8db4a36512572e82b4a15, >= 5.4.137 < 5.5, >= 5.10.55 < 5.11, >= 5.13.7 < 5.14, >= 5.14, 11.0, >= 5.4.137 < 5.4.289, >= 5.10.55 < 5.10.233, >= 5.13.7 < 5.15.166, >= 5.16 < 6.1.107, >= 6.2 < 6.6.48, >= 6.7 < 6.10.7, 6.11

Fixed versions

5.4.289, 5.10.233, 5.15.166, 6.1.107, 6.6.48, 6.10.7

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416