CVE-2024-35857 — NULL Pointer Dereference in Linux
Severity
5.3MEDIUMNVD
OSV6.5OSV5.5
EPSS
0.1%
top 81.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 17
Latest updateSep 18
Description
In the Linux kernel, the following vulnerability has been resolved:
icmp: prevent possible NULL dereferences from icmp_build_probe()
First problem is a double call to __in_dev_get_rcu(), because
the second one could return NULL.
if (__in_dev_get_rcu(dev) && __in_dev_get_rcu(dev)->ifa_list)
Second problem is a read from dev->ip6_ptr with no NULL check:
if (!list_empty(&rcu_dereference(dev->ip6_ptr)->addr_list))
Use the correct RCU API to fix these.
v2: add missing include
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4
Affected Packages9 packages
▶CVEListV5linux/linuxd329ea5bd8845f0b196bf41b18b6173340d6e0e4 — 23b7ee4a8d559bf38eac7ce5bb2f6ebf76f9c401+5
Patches
🔴Vulnerability Details
15📋Vendor Advisories
15💬Community
1Bugzilla
▶