Linux Kernel IPv6 SR: UAF & Null-Deref
CVE-2024-26735 Published on April 3, 2024
ipv6: sr: fix possible use-after-free and null-ptr-deref
In the Linux kernel, the following vulnerability has been resolved:
ipv6: sr: fix possible use-after-free and null-ptr-deref
The pernet operations structure for the subsystem must be registered
before registering the generic netlink family.
Products Associated with CVE-2024-26735
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2024-26735 are published in these products:
Affected Versions
Linux:- Version 915d7e5e5930b4f01d0971d93b9b25ed17d221aa and below 953f42934533c151f440cd32390044d2396b87aa is affected.
- Version 915d7e5e5930b4f01d0971d93b9b25ed17d221aa and below 82831e3ff76ef09fb184eb93b79a3eb3fb284f1d is affected.
- Version 915d7e5e5930b4f01d0971d93b9b25ed17d221aa and below 65c38f23d10ff79feea1e5d50b76dc7af383c1e6 is affected.
- Version 915d7e5e5930b4f01d0971d93b9b25ed17d221aa and below 91b020aaa1e59bfb669d34c968e3db3d5416bcee is affected.
- Version 915d7e5e5930b4f01d0971d93b9b25ed17d221aa and below 8391b9b651cfdf80ab0f1dc4a489f9d67386e197 is affected.
- Version 915d7e5e5930b4f01d0971d93b9b25ed17d221aa and below 9e02973dbc6a91e40aa4f5d87b8c47446fbfce44 is affected.
- Version 915d7e5e5930b4f01d0971d93b9b25ed17d221aa and below 02b08db594e8218cfbc0e4680d4331b457968a9b is affected.
- Version 915d7e5e5930b4f01d0971d93b9b25ed17d221aa and below 5559cea2d5aa3018a5f00dd2aca3427ba09b386b is affected.
- Version 4.10 is affected.
- Before 4.10 is unaffected.
- Version 4.19.308, <= 4.19.* is unaffected.
- Version 5.4.270, <= 5.4.* is unaffected.
- Version 5.10.211, <= 5.10.* is unaffected.
- Version 5.15.150, <= 5.15.* is unaffected.
- Version 6.1.80, <= 6.1.* is unaffected.
- Version 6.6.19, <= 6.6.* is unaffected.
- Version 6.7.7, <= 6.7.* is unaffected.
- Version 6.8, <= * is unaffected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.