CVE-2024-44986

HIGH

Linux Kernel 5.14-5.15.165, 5.16-6.1.106, 6.2-6.6.47, 6.7-6.10.6 - Use-After-Free in ip6_finish_output2()

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in ip6_finish_output2() If skb_expand_head() returns NULL, skb has been freed and associated dst/idev could also have been freed. We need to hold rcu_read_lock() to make sure the dst and associated idev are alive.

References (6)

Core 6

Scores

CVSS v3 7.8
EPSS 0.0002
EPSS Percentile 6.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-416
Status published
Products (25)
debian/debian_linux 11.0
linux/Kernel 5.14.0 - 5.15.166linux
linux/Kernel 5.16.0 - 6.1.107linux
linux/Kernel 6.2.0 - 6.6.48linux
linux/Kernel 6.7.0 - 6.10.7linux
Linux/Linux < 5.14
Linux/Linux 2323690eb05865a657709f4d28eb9538ea97bfc2
Linux/Linux 5.10.55 - 5.11
Linux/Linux 5.13.7 - 5.14
Linux/Linux 5.14
... and 15 more
Published Sep 04, 2024
Tracked Since Feb 18, 2026