Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: gtp: Fixed a use-after-free in gtpdellink. Since the callrcu function, which is called during the hlistforeachentryrcu traversal of gtpdellink, is not part of the RCU read critical section, it is possible that the RCU grace...

Linux Distros Unpatched Vulnerability : CVE-2024-26793

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gtp: fix use-after-free and null-ptr-deref in gtpnewlink The gtplinkops operations structure for the subsystem must be registered after registering the gtpnetop...

CVE-2024-26793

CVE-2024-26793 affects the Linux kernel gtp subsystem. The issue is a use-after-free and null pointer dereference in gtp_newlink() caused by incorrect registration order of gtp_link_ops relative to gtp_net_ops pernet structures. Syzkaller observed a general protection fault in gtp_genl_dump_pdp w...