← Back

CVE-2024-36903

nvd nist
Published: May 30, 2024Modified: Oct 15, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in __ip6_make_skb() As it was done in commit fc1092f51567 ("ipv4: Fix uninit-value access in __ip_make_skb()") for IPv4, check FLOWI_FLAG_KNOWN_NH on fl6->flowi6_flags instead of testing HDRINCL on the socket to avoid a race condition which causes uninit-value access.

Affected (15)

Products: Linux: Linux Kernel
Linux
1 product
Linux Kernel
Configuration A
15 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
4.14.313 ≤ version < 4.15
Linux Kernel
4.19.281 ≤ version < 4.20
Linux Kernel
5.10.178 ≤ version < 5.11
Linux Kernel
5.15.107 ≤ version < 5.16
Linux Kernel
5.4.241 ≤ version < 5.5
Linux Kernel
6.1.24 ≤ version < 6.2
Linux Kernel
6.2.11 ≤ version < 6.6.31
Linux Kernel
6.7 ≤ version < 6.8.10
Linux Kernel
Version 6.9 rc1
Linux Kernel
Version 6.9 rc2
Linux Kernel
Version 6.9 rc3
Linux Kernel
Version 6.9 rc4
Linux Kernel
Version 6.9 rc5
Linux Kernel
Version 6.9 rc6
Linux Kernel
Version 6.9 rc7

Related CWEs

CWE-908
Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.

References (12)

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.