Lucene search
K

5 matches found

Cvelist
Cvelist
added 2024/06/19 1:56 p.m.22 views

CVE-2024-38612 ipv6: sr: fix invalid unregister error path

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6init is wrong in case CONFIGIPV6SEG6LWTUNNEL is not defined. In that case if seg6hmacinit fails, the genlunregisterfamily isn't called. This issue exist since comm...

0.00181EPSS
Exploits0References9
CVE
CVE
added 2024/06/19 1:56 p.m.178 views

CVE-2024-38612

CVE-2024-38612 affects the Linux kernel; the flaw is in the ipv6 SR (seg6) unregister path. The error path in seg6_init() can skip genl_unregister_family() if CONFIG_IPV6_SEG6_LWTUNNEL is not defined and seg6_hmac_init() fails, due to a changed cleanup path (unregister_pernet_subsys() replaced by...

9.8CVSS9.2AI score0.00181EPSS
Exploits0References13Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/19 1:56 p.m.19 views

CVE-2024-38612 ipv6: sr: fix invalid unregister error path

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6init is wrong in case CONFIGIPV6SEG6LWTUNNEL is not defined. In that case if seg6hmacinit fails, the genlunregisterfamily isn't called. This issue exist since comm...

6.8AI score0.00181EPSS
Exploits0References9
OSV
OSV
added 2024/06/19 1:56 p.m.16 views

CVE-2024-38612 ipv6: sr: fix invalid unregister error path

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6init is wrong in case CONFIGIPV6SEG6LWTUNNEL is not defined. In that case if seg6hmacinit fails, the genlunregisterfamily isn't called. This issue exist since comm...

9.8CVSS6.1AI score0.00181EPSS
Exploits0References13
BDU FSTEC
BDU FSTEC
added 2024/05/15 12:0 a.m.1 views

The vulnerability of the seg6_init() function in the net/ipv6/seg6.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to cause a service failure.

The vulnerability of the seg6init function in the net/ipv6/seg6.c module of the Linux operating system’s IPv6 kernel implementation is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.00028EPSS
Exploits0References25Affected Software4
Rows per page
Query Builder