Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2024-27417
HistoryMay 17, 2024 - 12:15 p.m.

CVE-2024-27417

2024-05-1712:15:13
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
2
linux
kernel
fix
potential
struct net
leak
vulnerability
inet6_rtm_getaddr
cve-2024-27417

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.3%

In the Linux kernel, the following vulnerability has been resolved:

ipv6: fix potential “struct net” leak in inet6_rtm_getaddr()

It seems that if userspace provides a correct IFA_TARGET_NETNSID value
but no IFA_ADDRESS and IFA_LOCAL attributes, inet6_rtm_getaddr()
returns -EINVAL with an elevated “struct net” refcount.

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.3%