CVE-2024-36281

🗓️ 21 Jun 2024 10:18:07Reported by LinuxType

In the Linux kernel, vulnerability CVE-2024-36281 has been fixed by correcting the net/mlx5 code related to mlx5_ipsec_rx_status_destroy and mlx5_modify_header_dealloc to prevent NULL pointer dereference and rules leakage

Reporter	Title	Published	Views	Family All 80
AstraLinux	Astra Linux - уязвимость в linux-5.10	3 May 202623:59	–	astralinux
CNNVD	Linux kernel security vulnerabilities	21 Jun 202400:00	–	cnnvd
Cvelist	CVE-2024-36281 net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules	21 Jun 202410:18	–	cvelist
Debian CVE	CVE-2024-36281	21 Jun 202410:18	–	debiancve
Oracle linux	Unbreakable Enterprise kernel security update	23 Sep 202400:00	–	oraclelinux
Mageia	Updated kernel kmod-xtables-addons kmod-virtualbox dwarves packages fix security vulnerabilities	13 Jul 202407:54	–	mageia
Mageia	Updated kernel-linus packages fix security vulnerabilities	14 Jul 202405:23	–	mageia
Tenable Nessus	NewStart CGSL MAIN 7.02 : kernel Multiple Vulnerabilities (NS-SA-2025-0118)	25 Jul 202500:00	–	nessus
Tenable Nessus	Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12682)	30 Sep 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:2571-1)	23 Jul 202400:00	–	nessus

NVD

Vulners

CNA

Node

linux linux_kernelRange6.6.8–6.6.33

linux linux_kernelRange6.7–6.9.4

linux linux_kernelMatch6.10rc2

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c"
    ],
    "versions": [
      {
        "version": "20af7afcd8b85a4cb413072d631bf9a6469eee3a",
        "lessThan": "b0a15cde37a8388e57573686f650a17208ae1212",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "94af50c0a9bb961fe93cf0fdd14eb0883da86721",
        "lessThan": "cc9ac559f2e21894c21ac5b0c85fb24a5cab266c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "94af50c0a9bb961fe93cf0fdd14eb0883da86721",
        "lessThan": "16d66a4fa81da07bc4ed19f4e53b87263c2f8d38",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "6.6.8",
        "lessThan": "6.6.33",
        "status": "affected",
        "versionType": "semver"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c"
    ],
    "versions": [
      {
        "version": "6.7",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.7",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.33",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.9.4",
        "lessThanOrEqual": "6.9.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.10",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/cc9ac559f2e21894c21ac5b0c85fb24a5cab266c
git	www.git.kernel.org/stable/c/16d66a4fa81da07bc4ed19f4e53b87263c2f8d38
git	www.git.kernel.org/stable/c/b0a15cde37a8388e57573686f650a17208ae1212

23 May 2026 15:46Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.15.5

EPSS0.00015

SSVC

CWE-476