Vulnerability · Published May 17, 2024 · Assigned by Linux
CVE-2024-35857icmp: prevent possible NULL dereferences from icmp_build_probe()
High 7.5
In plain English
A high-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.0%top 37.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In the Linux kernel, the following vulnerability has been resolved: icmp: prevent possible NULL dereferences from icmp_build_probe() First problem is a double call to __in_dev_get_rcu(), because the second one could return NULL. if (__in_dev_get_rcu(dev) && __in_dev_get_rcu(dev)->ifa_list) Second problem is a read from dev->ip6_ptr with no NULL check: if (!list_empty(&rcu_dereference(dev->ip6_ptr)->addr_list)) Use the correct RCU API to fix these. v2: add missing include <net/addrconf.h>
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | bpftool | 7.3.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-64k | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-64k-core | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-64k-debug | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-64k-debug-core | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-64k-debug-devel | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-64k-debug-devel-matched | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-64k-debug-modules | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-64k-debug-modules-core | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-64k-debug-modules-extra | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-64k-devel | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-64k-devel-matched | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-64k-modules | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-64k-modules-core | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-64k-modules-extra | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-abi-stablelists | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-core | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-cross-headers | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-debug | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-debug-core | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-debug-devel | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-debug-devel-matched | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-debug-modules | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-debug-modules-core | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-debug-modules-extra | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-debug-uki-virt | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-devel | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-devel-matched | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-doc | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-headers | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-modules | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-modules-core | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-modules-extra | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-rt | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-rt-core | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-rt-debug | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-rt-debug-core | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-rt-debug-devel | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-rt-debug-modules | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-rt-debug-modules-core | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-rt-devel | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-rt-modules | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-rt-modules-core | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-rt-modules-extra | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-tools | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-tools-libs | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-tools-libs-devel | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-uki-virt | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-zfcpdump | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-zfcpdump-core | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-zfcpdump-modules-core | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | libperf | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | perf | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | python3-perf | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | rtla | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| AlmaLinux:9 | rv | 5.14.0-427.28.1.el9_4 | ALSA-2024:4928 |
| Debian:12 | linux | 6.1.90-1 | DEBIAN-CVE-2024-35857 |
| Debian:13 | linux | 6.8.9-1 | DEBIAN-CVE-2024-35857 |
| Debian:14 | linux | 6.8.9-1 | DEBIAN-CVE-2024-35857 |
| Rocky Linux:9 | kernel | 0:5.14.0-427.28.1.el9_4 | RLSA-2024:4928 |
| Rocky Linux:9 | kernel | 0:5.14.0-427.28.1.el9_4.cloud.1.0 | RXSA-2024:4928 |
| Ubuntu:22.04:LTS | linux | 5.15.0-116.126 | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux | 6.8.0-40.40 | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux | 6.8.0-40.40 | USN-6949-1 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1065.71 | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1013.14 | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1013.14 | USN-6949-1 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | 6.8.0-1013.14~22.04.1 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1068.77 | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1012.14 | USN-6952-2 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1012.14 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | 6.8.0-1012.14~22.04.1 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1068.77.1 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1064.72 | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1012.13 | USN-6949-1 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1012.13 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | 6.8.0-1012.13~22.04.1 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1062.68 | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1008.11 | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1008.11 | USN-6949-1 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1048.55 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-hwe-6.8 | 6.8.0-40.40~22.04.3 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1058.61 | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1010.10 | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1010.10 | USN-6949-1 |
| Ubuntu:22.04:LTS | linux-ibm-6.8 | 6.8.0-1010.10~22.04.1 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1060.66 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1062.67 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-116.126 | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-40.40.1 | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-40.40.1 | USN-6949-2 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-40.40.1~22.04.1 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1060.61 | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1011.11 | USN-6949-1 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1011.11 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1011.11~22.04.1 | USN-6949-1 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1011.11~22.04.1 | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1011.11.1 | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1011.11.1 | USN-6952-1 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1026.26 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1015.15 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | 6.8.0-1010.10 | USN-6955-1 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | 6.8.0-1010.10 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1063.69 | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1010.10 | USN-6952-1 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1010.10 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1010.10~22.04.1 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1058.61 | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1009.10 | USN-6949-2 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1009.10 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:24.04:LTS | linux-riscv | 6.8.0-40.40.1 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-riscv-6.8 | 6.8.0-40.40.1~22.04.1 | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2024-35857 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1035.39 | UBUNTU-CVE-2024-35857 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | d329ea5bd8845f0b196bf41b18b6173340d6e0e4 – before 23b7ee4a8d559bf38eac7ce5bb2f6ebf76f9c401d329ea5bd8845f0b196bf41b18b6173340d6e0e4 – before 599c9ad5e1d43f5c12d869f5fd406ba5d8c55270d329ea5bd8845f0b196bf41b18b6173340d6e0e4 – before d68dc711d84fdcf698e5d45308c3ddeede586350d329ea5bd8845f0b196bf41b18b6173340d6e0e4 – before 3e2979bf080c40da4f7c93aff8575ab8bc62b767d329ea5bd8845f0b196bf41b18b6173340d6e0e4 – before c58e88d49097bd12dfcfef4f075b43f5d5830941 |
| Linux | Linux | 5.13 |
Weakness: CWE-476 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://git.kernel.org/stable/c/23b7ee4a8d559bf38eac7ce5bb2f6ebf76f9c401
- https://git.kernel.org/stable/c/599c9ad5e1d43f5c12d869f5fd406ba5d8c55270
- https://git.kernel.org/stable/c/d68dc711d84fdcf698e5d45308c3ddeede586350
- https://git.kernel.org/stable/c/3e2979bf080c40da4f7c93aff8575ab8bc62b767
- https://git.kernel.org/stable/c/c58e88d49097bd12dfcfef4f075b43f5d5830941