Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: seg6: Fixed parameter passing when calling NFHOOK in the End.DX4 and End.DX6 behaviors. The functions inputactionenddx4 and inputactionenddx6 call NFHOOK for the PREROUTING hook. During the PREROUTING hook, a valid indev and a...

kernel: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors

A vulnerability was found in the Linux kernel's segment routing seg6 component in the inputactionenddx4 and inputactionenddx6 functions, where improper parameter passing to the NFHOOK can occur, which leads to a NULL pointer dereference when a NULL input device is provided, resulting in a kernel...

SUSE CVE-2024-40957

In the Linux kernel, the following vulnerability has been resolved: seg6: fix parameter passing when calling NFHOOK in End.DX4 and End.DX6 behaviors inputactionenddx4 and inputactionenddx6 are called NFHOOK for PREROUTING hook, in PREROUTING hook, we should passing a valid indev, and a NULL outde...

DEBIAN-CVE-2024-40957

In the Linux kernel, the following vulnerability has been resolved: seg6: fix parameter passing when calling NFHOOK in End.DX4 and End.DX6 behaviors inputactionenddx4 and inputactionenddx6 are called NFHOOK for PREROUTING hook, in PREROUTING hook, we should passing a valid indev, and a NULL outde...

PT-2024-29173

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's seg6 module, where the input action end dx4 and input action end dx6 functions are called with NF HOOK for the PREROUTING hook. In this hook, a...