-

CVE-2024-27417

In the Linux kernel, the following vulnerability has been resolved:

ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()

It seems that if userspace provides a correct IFA_TARGET_NETNSID value
but no IFA_ADDRESS and IFA_LOCAL attributes, inet6_rtm_getaddr()
returns -EINVAL with an elevated "struct net" refcount.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version < 9d4ffb5b9d879a75e4f7460e8b10e756b4dfb132
Version 6ecf4c37eb3e89b0832c9616089a5cdca3747da7
Status affected
Version < 810fa7d5e5202fcfb22720304b755f1bdfd4c174
Version 6ecf4c37eb3e89b0832c9616089a5cdca3747da7
Status affected
Version < 8a54834c03c30e549c33d5da0975f3e1454ec906
Version 6ecf4c37eb3e89b0832c9616089a5cdca3747da7
Status affected
Version < 1b0998fdd85776775d975d0024bca227597e836a
Version 6ecf4c37eb3e89b0832c9616089a5cdca3747da7
Status affected
Version < 44112bc5c74e64f28f5a9127dc34066c7a09bd0f
Version 6ecf4c37eb3e89b0832c9616089a5cdca3747da7
Status affected
Version < 33a1b6bfef6def2068c8703403759024ce17053e
Version 6ecf4c37eb3e89b0832c9616089a5cdca3747da7
Status affected
Version < 10bfd453da64a057bcfd1a49fb6b271c48653cdb
Version 6ecf4c37eb3e89b0832c9616089a5cdca3747da7
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.20
Status affected
Version < 4.20
Version 0
Status unaffected
Version <= 5.4.*
Version 5.4.271
Status unaffected
Version <= 5.10.*
Version 5.10.212
Status unaffected
Version <= 5.15.*
Version 5.15.151
Status unaffected
Version <= 6.1.*
Version 6.1.81
Status unaffected
Version <= 6.6.*
Version 6.6.21
Status unaffected
Version <= 6.7.*
Version 6.7.9
Status unaffected
Version <= *
Version 6.8
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.119
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String