EulerOS 2.0 SP12 : kernel (EulerOS-SA-2024-2519)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bpf, skmsg: Fix NULL pointer dereference in skpsockskbingressenqueueCVE-2024-36938 bpf, sockmap: Prevent lock inversion deadlock in map delete...

CVE-2024-27417

CVE-2024-27417 affects the Linux kernel IPv6 path inet6_rtm_getaddr, where if userspace provides a correct IFA_TARGET_NETNSID but omits IFA_ADDRESS and IFA_LOCAL, the function could return -EINVAL while leaking an elevated net namespace reference. The issue is described as a potential 4net leak...

CVE-2024-27417: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix potential "struct net" leak in inet6rtmgetaddr It seems that if userspace provides a correct IFATARGETNETNSID value but no IFAADDRESS and IFALOCAL attributes, inet6rtmgetaddr returns -EINVAL with an elevated "struct net...