imPC@ndo IT

Tracker / CVE-2024-44985

CVE-2024-44985

Critical 9.8

In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UAF in ip6_xmit() If skb_expand_head() returns NULL, skb has been freed and the associated dst/idev could also have been freed. We must use rcu_read_lock() to prevent a possible UAF.

Affected products and versions

linux linux_kernel
linux linux_kernel · 5.15 → 5.15.166
linux linux_kernel · 5.16 → 6.1.107
linux linux_kernel · 6.2 → 6.6.48
linux linux_kernel · 6.7 → 6.10.7

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References