Vulnerability · Published Apr 3, 2024 · Assigned by Linux

CVE-2024-26735ipv6: sr: fix possible use-after-free and null-ptr-deref

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.3%top 80.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure for the subsystem must be registered before registering the generic netlink family.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9bpftool7.3.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-64k5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-64k-core5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-64k-debug5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-64k-debug-core5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-64k-debug-devel5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-64k-debug-modules5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-64k-devel5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-64k-devel-matched5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-64k-modules5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-64k-modules-core5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-64k-modules-extra5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-abi-stablelists4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-abi-stablelists5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-core4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-core5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-cross-headers4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-cross-headers5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-debug4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-debug5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-debug-core4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-debug-core5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-debug-devel4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-debug-devel5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-debug-devel-matched5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-debug-modules4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-debug-modules5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-debug-modules-core5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-debug-modules-extra4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-debug-modules-extra5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-debug-uki-virt5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-devel4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-devel5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-devel-matched5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-doc4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-doc5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-headers4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-headers5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-modules4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-modules5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-modules-core5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-modules-extra4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-modules-extra5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-rt4.18.0-553.8.1.rt7.349.el8_10ALSA-2024:4352
AlmaLinux:9kernel-rt5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-rt-core4.18.0-553.8.1.rt7.349.el8_10ALSA-2024:4352
AlmaLinux:9kernel-rt-core5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-rt-debug4.18.0-553.8.1.rt7.349.el8_10ALSA-2024:4352
AlmaLinux:9kernel-rt-debug5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-rt-debug-core4.18.0-553.8.1.rt7.349.el8_10ALSA-2024:4352
AlmaLinux:9kernel-rt-debug-core5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-rt-debug-devel4.18.0-553.8.1.rt7.349.el8_10ALSA-2024:4352
AlmaLinux:9kernel-rt-debug-devel5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-rt-debug-kvm4.18.0-553.8.1.rt7.349.el8_10ALSA-2024:4352
AlmaLinux:8kernel-rt-debug-modules4.18.0-553.8.1.rt7.349.el8_10ALSA-2024:4352
AlmaLinux:9kernel-rt-debug-modules5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-rt-debug-modules-extra4.18.0-553.8.1.rt7.349.el8_10ALSA-2024:4352
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-rt-devel4.18.0-553.8.1.rt7.349.el8_10ALSA-2024:4352
AlmaLinux:9kernel-rt-devel5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-rt-kvm4.18.0-553.8.1.rt7.349.el8_10ALSA-2024:4352
AlmaLinux:8kernel-rt-modules4.18.0-553.8.1.rt7.349.el8_10ALSA-2024:4352
AlmaLinux:9kernel-rt-modules5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-rt-modules-core5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-rt-modules-extra4.18.0-553.8.1.rt7.349.el8_10ALSA-2024:4352
AlmaLinux:9kernel-rt-modules-extra5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-tools4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-tools5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-tools-libs4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-tools-libs5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-tools-libs-devel4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-tools-libs-devel5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-uki-virt5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-zfcpdump4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-zfcpdump5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-zfcpdump-core4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-zfcpdump-core5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-zfcpdump-devel4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-zfcpdump-devel5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-zfcpdump-modules4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-zfcpdump-modules5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9libperf5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8perf4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9perf5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:8python3-perf4.18.0-553.8.1.el8_10ALSA-2024:4211
AlmaLinux:9python3-perf5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9rtla5.14.0-427.20.1.el9_4ALSA-2024:3619
AlmaLinux:9rv5.14.0-427.20.1.el9_4ALSA-2024:3619
Debian:12linux6.1.82-1DEBIAN-CVE-2024-26735
Debian:13linux6.7.7-1DEBIAN-CVE-2024-26735
Debian:14linux6.7.7-1DEBIAN-CVE-2024-26735
Rocky Linux:8kernel0:4.18.0-553.8.1.el8_10RLSA-2024:4211
Rocky Linux:9kernel0:5.14.0-427.20.1.el9_4RLSA-2024:3619
Rocky Linux:8kernel-rt0:4.18.0-553.8.1.rt7.349.el8_10RLSA-2024:4352
Ubuntu:22.04:LTSlinux5.15.0-112.122USN-6820-1
Ubuntu:22.04:LTSlinux5.15.0-112.122UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-aws5.15.0-1063.69UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-aws5.15.0-1063.69USN-6821-3
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-aws-6.56.5.0-1023.23~22.04.1UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-azure5.15.0-1066.75USN-6821-4
Ubuntu:22.04:LTSlinux-azure5.15.0-1066.75UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-azure-6.56.5.0-1024.25~22.04.1UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1067.76.1UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1065.74.1USN-6821-4
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-gcp5.15.0-1062.70UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-gcp5.15.0-1062.70USN-6820-1
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-gcp-6.56.5.0-1024.26~22.04.1UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-gke5.15.0-1060.66UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-gke5.15.0-1060.66USN-6821-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1046.53UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1046.53USN-6821-2
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-hwe-6.56.5.0-44.44~22.04.1UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-ibm5.15.0-1056.59USN-6821-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1056.59UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1058.64UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1058.64USN-6821-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1060.65UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-kvm5.15.0-1060.65USN-6821-2
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-110.120UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-110.120USN-6820-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.56.5.0-44.44.1~22.04.1UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1058.59UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1058.59USN-6820-2
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-nvidia-6.56.5.0-1023.24UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1026.26UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1015.15UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1027.28UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-oracle5.15.0-1061.67UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-oracle5.15.0-1061.67USN-6821-1
Ubuntu:22.04:LTSlinux-oracle-6.56.5.0-1026.26~22.04.1UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-raspi5.15.0-1058.61USN-6919-1
Ubuntu:22.04:LTSlinux-raspi5.15.0-1058.61UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-starfive-6.56.5.0-1017.18~22.04.1UBUNTU-CVE-2024-26735
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1030.34USN-6820-1
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1030.34UBUNTU-CVE-2024-26735

Affected products (as reported)

VendorProductVersions
Linux Linux 915d7e5e5930b4f01d0971d93b9b25ed17d221aa – before 953f42934533c151f440cd32390044d2396b87aa915d7e5e5930b4f01d0971d93b9b25ed17d221aa – before 82831e3ff76ef09fb184eb93b79a3eb3fb284f1d915d7e5e5930b4f01d0971d93b9b25ed17d221aa – before 65c38f23d10ff79feea1e5d50b76dc7af383c1e6915d7e5e5930b4f01d0971d93b9b25ed17d221aa – before 91b020aaa1e59bfb669d34c968e3db3d5416bcee915d7e5e5930b4f01d0971d93b9b25ed17d221aa – before 8391b9b651cfdf80ab0f1dc4a489f9d67386e197915d7e5e5930b4f01d0971d93b9b25ed17d221aa – before 9e02973dbc6a91e40aa4f5d87b8c47446fbfce44915d7e5e5930b4f01d0971d93b9b25ed17d221aa – before 02b08db594e8218cfbc0e4680d4331b457968a9b915d7e5e5930b4f01d0971d93b9b25ed17d221aa – before 5559cea2d5aa3018a5f00dd2aca3427ba09b386b
Linux Linux 4.10

References