CVE-2024-35857
Published: May 17, 2024
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: icmp: prevent possible NULL dereferences from icmp_build_probe() First problem is a double call to __in_dev_get_rcu(), because the second one could return NULL. if (__in_dev_get_rcu(dev) && __in_dev_get_rcu(dev)->ifa_list) Second problem is a read from dev->ip6_ptr with no NULL check: if (!list_empty(&rcu_dereference(dev->ip6_ptr)->addr_list)) Use the correct RCU API to fix these. v2: add missing include <net/addrconf.h>
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected d329ea5bd8845f0b196bf41b18b6173340d6e0e4 - < 23b7ee4a8d559bf38eac7ce5bb2f6ebf76f9c401affected d329ea5bd8845f0b196bf41b18b6173340d6e0e4 - < 599c9ad5e1d43f5c12d869f5fd406ba5d8c55270affected d329ea5bd8845f0b196bf41b18b6173340d6e0e4 - < d68dc711d84fdcf698e5d45308c3ddeede586350affected d329ea5bd8845f0b196bf41b18b6173340d6e0e4 - < 3e2979bf080c40da4f7c93aff8575ab8bc62b767affected d329ea5bd8845f0b196bf41b18b6173340d6e0e4 - < c58e88d49097bd12dfcfef4f075b43f5d5830941 |
Linux | Linux | affected 5.13unaffected 0 - < 5.13unaffected 5.15.158 - <= 5.15.*unaffected 6.1.90 - <= 6.1.*unaffected 6.6.30 - <= 6.6.*+2 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now