CVE-2024-27417

May 17, 2024, 6:35 p.m.

None
No Score

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() It seems that if userspace provides a correct IFA_TARGET_NETNSID value but no IFA_ADDRESS and IFA_LOCAL attributes, inet6_rtm_getaddr() returns -EINVAL with an elevated "struct net" refcount.

Product(s) Impacted

Product Versions
Linux Kernel
  • []

Weaknesses

Common security weaknesses mapped to this vulnerability.

References

https://git.kernel.org/stable/c/10bfd453da64a057bcfd1a49fb6b271c48653cdb
https://git.kernel.org/stable/c/1b0998fdd85776775d975d0024bca227597e836a
https://git.kernel.org/stable/c/33a1b6bfef6def2068c8703403759024ce17053e
https://git.kernel.org/stable/c/44112bc5c74e64f28f5a9127dc34066c7a09bd0f
https://git.kernel.org/stable/c/810fa7d5e5202fcfb22720304b755f1bdfd4c174
https://git.kernel.org/stable/c/8a54834c03c30e549c33d5da0975f3e1454ec906
https://git.kernel.org/stable/c/9d4ffb5b9d879a75e4f7460e8b10e756b4dfb132

Tags

416baaa9-dc9f-4396-8d5f-8c081fb06d67
2024-05-17
CVE-2024-27417

Timeline

Published: May 17, 2024, 12:15 p.m.
Last Modified: May 17, 2024, 6:35 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.