CVE-2024-26852

🗓️ 17 Apr 2024 10:17:15Reported by LinuxType

Linux kernel ipv6 UAF vulnerability CVE-2024-26852 resolved. Use-after-free in ip6_route_mpath_notify(). Need to defer the fib6_info_release() calls after ip6_route_mpath_notify()

Reporter	Title	Published	Views	Family All 765
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in OS kernel	10 Jun 202521:06	–	ibm
Tenable Nessus	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2024-784)	11 Dec 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel (ALAS-2025-2745)	4 Feb 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2024-076 (ALASKERNEL-5.10-2024-076)	23 Dec 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2024-058 (ALASKERNEL-5.15-2024-058)	23 Dec 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel (ALASKERNEL-5.4-2024-089)	23 Dec 202400:00	–	nessus
Tenable Nessus	Amazon Linux AMI : kernel (ALAS-2025-1957)	5 Feb 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : kernel (ALSA-2024:5101)	9 Aug 202400:00	–	nessus
Tenable Nessus	AlmaLinux 8 : kernel-rt (ALSA-2024:5102)	9 Aug 202400:00	–	nessus
Tenable Nessus	Debian dla-3840 : hyperv-daemons - security update	27 Jun 202400:00	–	nessus

NVD

Vulners

CNA

Node

linux linux_kernelRange4.11–4.19.310

linux linux_kernelRange4.20–5.4.272

linux linux_kernelRange5.5–5.10.213

linux linux_kernelRange5.11–5.15.152

linux linux_kernelRange5.16–6.1.82

linux linux_kernelRange6.2–6.6.22

linux linux_kernelRange6.7–6.7.10

linux linux_kernelMatch6.8rc1

linux linux_kernelMatch6.8rc2

linux linux_kernelMatch6.8rc3

linux linux_kernelMatch6.8rc4

linux linux_kernelMatch6.8rc5

linux linux_kernelMatch6.8rc6

Node

debian debian_linuxMatch10.0

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/ipv6/route.c"
    ],
    "versions": [
      {
        "version": "3b1137fe74829e021f483756a648cbb87c8a1b4a",
        "lessThan": "31ea5bcc7d4cd1423de6be327a2c034725704136",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3b1137fe74829e021f483756a648cbb87c8a1b4a",
        "lessThan": "664f9c647260cc9d68b4e31d9899530d89dd045e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3b1137fe74829e021f483756a648cbb87c8a1b4a",
        "lessThan": "79ce2e54cc0ae366f45516c00bf1b19aa43e9abe",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3b1137fe74829e021f483756a648cbb87c8a1b4a",
        "lessThan": "cae3303257950d03ffec2df4a45e836f10d26c24",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3b1137fe74829e021f483756a648cbb87c8a1b4a",
        "lessThan": "394334fe2ae3b9f1e2332b873857e84cb28aac18",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3b1137fe74829e021f483756a648cbb87c8a1b4a",
        "lessThan": "ed883060c38721ed828061f6c0c30e5147326c9a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3b1137fe74829e021f483756a648cbb87c8a1b4a",
        "lessThan": "61b34f73cdbdb8eaf9ea12e9e2eb3b29716c4dda",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "3b1137fe74829e021f483756a648cbb87c8a1b4a",
        "lessThan": "685f7d531264599b3f167f1e94bbd22f120e5fab",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/ipv6/route.c"
    ],
    "versions": [
      {
        "version": "4.11",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.11",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "4.19.310",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.4.272",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.213",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.152",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.82",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.22",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.7.10",
        "lessThanOrEqual": "6.7.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.8",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/31ea5bcc7d4cd1423de6be327a2c034725704136
git	www.git.kernel.org/stable/c/79ce2e54cc0ae366f45516c00bf1b19aa43e9abe
git	www.git.kernel.org/stable/c/ed883060c38721ed828061f6c0c30e5147326c9a
git	www.git.kernel.org/stable/c/61b34f73cdbdb8eaf9ea12e9e2eb3b29716c4dda
git	www.git.kernel.org/stable/c/cae3303257950d03ffec2df4a45e836f10d26c24
git	www.git.kernel.org/stable/c/685f7d531264599b3f167f1e94bbd22f120e5fab
git	www.git.kernel.org/stable/c/664f9c647260cc9d68b4e31d9899530d89dd045e
git	www.git.kernel.org/stable/c/394334fe2ae3b9f1e2332b873857e84cb28aac18
lists	www.lists.debian.org/debian-lts-announce/2024/06/msg00020.html
lists	www.lists.debian.org/debian-lts-announce/2024/06/msg00017.html

17 Jun 2026 07:18Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.17.8

EPSS0.00269

SSVC

CWE-416