Skip to content
Heist/ feed
Unrated

ipv6: prevent possible NULL dereference in rt6_probe()

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL dereference in rt6_probe() syzbot caught a NULL dereference in rt6_probe() [1] Bail out if __in6_dev_get() returns NULL. [1] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000cb: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000658-0x000000000000065f] CPU: 1 PID: 22444 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00383-gb8481381d4e2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:rt6_probe net/ipv6/route.c:656 [inline] RIP: 0010:find_match+0x8c4/0xf50 net/ipv6/route.c:758 Code: 14 fd f7 48 8b 85 38 ff ff ff 48 c7 45 b0 00 00 00 00 48 8d b8 5c 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 19 RSP: 0018:ffffc900034af070 EFLAGS: 00010203 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90004521000 RDX: 00000000000000cb RSI: ffffffff8990d0cd RDI: 000000000000065c RBP: ffffc900034af150 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000002 R12: 000000000000000a R13: 1ffff92000695e18 R14: ffff8880244a1d20 R15: 0000000000000000 FS: 00007f4844a5a6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31b27000 CR3: 000000002d42c000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 00000000

Announced Source revision 1
Original source ↗

CVE-2024-40960

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2024-40960

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "52e1635631b342803aecaf81a362c1464e3da2e5",
        "lessThan": "f0cda984e4e634b221dbf9642b8ecc5b4806b41e",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "52e1635631b342803aecaf81a362c1464e3da2e5",
        "lessThan": "d66fc4826127c82f99c4033380f8e93833d331c7",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "52e1635631b342803aecaf81a362c1464e3da2e5",
        "lessThan": "1ed9849fdf9a1a617129346b11d2094ca26828dc",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "52e1635631b342803aecaf81a362c1464e3da2e5",
        "lessThan": "569c9d9ea6648d099187527b93982f406ddcebc0",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "52e1635631b342803aecaf81a362c1464e3da2e5",
        "lessThan": "51ee2f7c30790799d0ec30c0ce0c743e58f046f2",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "52e1635631b342803aecaf81a362c1464e3da2e5",
        "lessThan": "73e7c8ca6ad76f29b2c99c20845a6f3b203ff0c6",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "52e1635631b342803aecaf81a362c1464e3da2e5",
        "lessThan": "6eed6d3cd19ff3cfa83aeceed86da14abaf7417b",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "52e1635631b342803aecaf81a362c1464e3da2e5",
        "lessThan": "b86762dbe19a62e785c189f313cda5b989931f37",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "net/ipv6/route.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "2.6.17"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "2.6.17",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "4.19.317",
        "versionType": "semver",
        "lessThanOrEqual": "4.19.*"
      },
      {
        "status": "unaffected",
        "version": "5.4.279",
        "versionType": "semver",
        "lessThanOrEqual": "5.4.*"
      },
      {
        "status": "unaffected",
        "version": "5.10.221",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.162",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.96",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.36",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.9.7",
        "versionType": "semver",
        "lessThanOrEqual": "6.9.*"
      },
      {
        "status": "unaffected",
        "version": "6.10",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "net/ipv6/route.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2024-40960

Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event
#26646 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement