CVE-2024-42322

MEDIUM

Linux Kernel - Use-After-Free in IPVS Service Addition

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: ipvs: properly dereference pe in ip_vs_add_service Use pe directly to resolve sparse warning: net/netfilter/ipvs/ip_vs_ctl.c:1471:27: warning: dereference of noderef expression

References (8)

Core 8

Core References

Mailing List

https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Mailing List

https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html

Patch

https://git.kernel.org/stable/c/36c997f1e03601475ad0fda0e0f59b7a209e756b

Patch

https://git.kernel.org/stable/c/211168339657f36f32fb597afd0e3ac82d726119

Patch

https://git.kernel.org/stable/c/b2c664df3bb46aabac6a5fd78aaa5bd614cfad97

Patch

https://git.kernel.org/stable/c/3dd428039e06e1967ce294e2cd6342825aaaad77

Patch

https://git.kernel.org/stable/c/c420cd5d5bc6797f3a8824e7d74f38f0c286fca5

Patch

https://git.kernel.org/stable/c/cbd070a4ae62f119058973f6d2c984e325bce6e7

Scores

CVSS v3 5.5

EPSS 0.0023

EPSS Percentile 13.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (20)

linux/Kernel 4.7.0 - 5.10.237linux

linux/Kernel 5.11.0 - 5.15.181linux

linux/Kernel 5.16.0 - 6.1.119linux

linux/Kernel 6.2.0 - 6.6.44linux

linux/Kernel 6.7.0 - 6.10.3linux

Linux/Linux < 4.7

Linux/Linux 39b9722315364121c6e2524515a6e95d52287549 - 211168339657f36f32fb597afd0e3ac82d726119

Linux/Linux 39b9722315364121c6e2524515a6e95d52287549 - 36c997f1e03601475ad0fda0e0f59b7a209e756b

Linux/Linux 39b9722315364121c6e2524515a6e95d52287549 - 3dd428039e06e1967ce294e2cd6342825aaaad77

Linux/Linux 39b9722315364121c6e2524515a6e95d52287549 - b2c664df3bb46aabac6a5fd78aaa5bd614cfad97

... and 10 more

Published Aug 17, 2024

Tracked Since Feb 18, 2026