Lucene search

LinuxCVE-2024-46677

HistorySep 13, 2024 - 6:15 a.m.

CVE-2024-46677

2024-09-1306:15:12

CWE-476

Linux

web.nvd.nist.gov

linux kernel

vulnerability

gtp

null pointer

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

Low

EPSS

Percentile

5.1%

JSON

In the Linux kernel, the following vulnerability has been resolved:

gtp: fix a potential NULL pointer dereference

When sockfd_lookup() fails, gtp_encap_enable_socket() returns a
NULL pointer, but its callers only check for error pointers thus miss
the NULL pointer case.

Fix it by returning an error pointer with the error code carried from
sockfd_lookup().

(I found this bug during code inspection.)

Affected configurations

Nvd

Vulners

Node

linuxlinux_kernelRange4.12–4.19.321

linuxlinux_kernelRange4.20–5.4.283

linuxlinux_kernelRange5.5–5.10.225

linuxlinux_kernelRange5.11–5.15.166

linuxlinux_kernelRange5.16–6.1.108

linuxlinux_kernelRange6.2–6.6.49

linuxlinux_kernelRange6.7–6.10.8

linuxlinux_kernelMatch6.11rc1

linuxlinux_kernelMatch6.11rc2

linuxlinux_kernelMatch6.11rc3

linuxlinux_kernelMatch6.11rc4

linuxlinux_kernelMatch6.11rc5

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel6.11cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
linuxlinux_kernel6.11cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*
linuxlinux_kernel6.11cpe:2.3:o:linux:linux_kernel:6.11:rc3:*:*:*:*:*:*
linuxlinux_kernel6.11cpe:2.3:o:linux:linux_kernel:6.11:rc4:*:*:*:*:*:*
linuxlinux_kernel6.11cpe:2.3:o:linux:linux_kernel:6.11:rc5:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	6.11	cpe:2.3:o:linux:linux_kernel:6.11:rc1::::::
linux	linux_kernel	6.11	cpe:2.3:o:linux:linux_kernel:6.11:rc2::::::
linux	linux_kernel	6.11	cpe:2.3:o:linux:linux_kernel:6.11:rc3::::::
linux	linux_kernel	6.11	cpe:2.3:o:linux:linux_kernel:6.11:rc4::::::
linux	linux_kernel	6.11	cpe:2.3:o:linux:linux_kernel:6.11:rc5::::::

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/gtp.c"
    ],
    "versions": [
      {
        "version": "1e3a3abd8b28",
        "lessThan": "620fe9809752",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1e3a3abd8b28",
        "lessThan": "bdd99e5f0ad5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1e3a3abd8b28",
        "lessThan": "8bbb9e4e0e66",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1e3a3abd8b28",
        "lessThan": "4643b91691e9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1e3a3abd8b28",
        "lessThan": "e8b9930b0eb0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1e3a3abd8b28",
        "lessThan": "28c67f0f84f8",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1e3a3abd8b28",
        "lessThan": "612edd35f2a3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1e3a3abd8b28",
        "lessThan": "defd8b3c37b0",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/gtp.c"
    ],
    "versions": [
      {
        "version": "4.12",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.12",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "4.19.321",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.4.283",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.10.225",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.15.166",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.108",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.49",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.10.8",
        "lessThanOrEqual": "6.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.11",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

References

git.kernel.org/stable/c/28c67f0f84f889fe9f4cbda8354132b20dc9212d

git.kernel.org/stable/c/4643b91691e969b1b9ad54bf552d7a990cfa3b87

git.kernel.org/stable/c/612edd35f2a3910ab1f61c1f2338889d4ba99fa2

git.kernel.org/stable/c/620fe9809752fae91b4190e897b81ed9976dfb39

git.kernel.org/stable/c/8bbb9e4e0e66a39282e582d0440724055404b38c

git.kernel.org/stable/c/bdd99e5f0ad5fa727b16f2101fe880aa2bff2f8e

git.kernel.org/stable/c/defd8b3c37b0f9cb3e0f60f47d3d78d459d57fda

git.kernel.org/stable/c/e8b9930b0eb045d19e883c65ff9676fc89320c70

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2024-46677