Tracker / CVE-2024-36903
CVE-2024-36903
Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in __ip6_make_skb() As it was done in commit fc1092f51567 ("ipv4: Fix uninit-value access in __ip_make_skb()") for IPv4, check FLOWI_FLAG_KNOWN_NH on fl6->flowi6_flags instead of testing HDRINCL on the socket to avoid a race condition which causes uninit-value access.
Affected products and versions
| linux | linux_kernel |
|---|---|
| linux | linux_kernel · 4.14.313 → 4.15 |
| linux | linux_kernel · 4.19.281 → 4.20 |
| linux | linux_kernel · 5.10.178 → 5.11 |
| linux | linux_kernel · 5.15.107 → 5.16 |
| linux | linux_kernel · 5.4.241 → 5.5 |
| linux | linux_kernel · 6.1.24 → 6.2 |
| linux | linux_kernel · 6.2.11 → 6.6.31 |
| linux | linux_kernel · 6.7 → 6.8.10 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.