Yüksek CVSS 7

CVE-2024-38612: Linux Kernel: serbest bırakılmış belleğin kullanımı

Yayın: 19 Haziran 2024 17:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6_init() is wrong in case CONFIG_IPV6_SEG6_LWTUNNEL is not defined. In that case if seg6_hmac_init() fails, the genl_unregister_family() isn't called. This issue exist since commit 46738b1317e1 ("ipv6: sr: add option to control lwtunnel support"), and commit 5559cea2d5aa ("ipv6: sr: fix possible use-after-free and null-ptr-deref") replaced unregister_pernet_subsys() with genl_unregister_family() in this error path.

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: %0,66 (yüzdelik 52)
CWE: CWE-416
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	4.10	—	4.19.316
linux-linux-kernel	4.20	—	5.4.278
linux-linux-kernel	5.5	—	5.10.219
linux-linux-kernel	5.11	—	5.15.161
linux-linux-kernel	5.16	—	6.1.93
linux-linux-kernel	6.2	—	6.6.33
linux-linux-kernel	6.7	—	6.8.12
linux-linux-kernel	6.9	—	6.9.3

Kaynaklar

Uygulamada aç Tüm CVE kayıtları