5.5

CVE-2024-46677

gtp: fix a potential NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved:

gtp: fix a potential NULL pointer dereference

When sockfd_lookup() fails, gtp_encap_enable_socket() returns a
NULL pointer, but its callers only check for error pointers thus miss
the NULL pointer case.

Fix it by returning an error pointer with the error code carried from
sockfd_lookup().

(I found this bug during code inspection.)
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.12 < 4.19.321
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.283
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.225
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.166
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.108
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.49
Linux ≫ Linux Kernel Version >= 6.7 < 6.10.8
Linux ≫ Linux Kernel Version 6.11 Update rc1
Linux ≫ Linux Kernel Version 6.11 Update rc2
Linux ≫ Linux Kernel Version 6.11 Update rc3
Linux ≫ Linux Kernel Version 6.11 Update rc4
Linux ≫ Linux Kernel Version 6.11 Update rc5
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.18
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://git.kernel.org/stable/c/28c67f0f84f889fe9f4cbda8354132b20dc9212d
Patch
https://git.kernel.org/stable/c/4643b91691e969b1b9ad54bf552d7a990cfa3b87
Patch
https://git.kernel.org/stable/c/612edd35f2a3910ab1f61c1f2338889d4ba99fa2
Patch
https://git.kernel.org/stable/c/620fe9809752fae91b4190e897b81ed9976dfb39
Patch
https://git.kernel.org/stable/c/8bbb9e4e0e66a39282e582d0440724055404b38c
Patch
https://git.kernel.org/stable/c/bdd99e5f0ad5fa727b16f2101fe880aa2bff2f8e
Patch
https://git.kernel.org/stable/c/defd8b3c37b0f9cb3e0f60f47d3d78d459d57fda
Patch
https://git.kernel.org/stable/c/e8b9930b0eb045d19e883c65ff9676fc89320c70
Patch
https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html