IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
7.0Alta

CVE-2024-38612ipv6: sr: fix invalid unregister error path

Linux Linux; linux linux_kernel; linux acrn; Siemens RUGGEDCOM RST2428P Publicada: (hace 2 años)

Descripción

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6_init() is wrong in case CONFIG_IPV6_SEG6_LWTUNNEL is not defined. In that case if seg6_hmac_init() fails, the genl_unregister_family() isn't called. This issue exist since commit 46738b1317e1 ("ipv6: sr: add option to control lwtunnel support"), and commit 5559cea2d5aa ("ipv6: sr: fix possible use-after-free and null-ptr-deref") replaced unregister_pernet_subsys() with genl_unregister_family() in this error path.

Debilidad (CWE): CWE-476CWE-416

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
linux acrn —
Linux Linux 4.10
linux linux_kernel 46738b1317e1 – < 0610575a3ac
Siemens RUGGEDCOM RST2428P < V3.1
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family —
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family < V3.1
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP V3.1.0 – < V3.1.5
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP V3.1.0 – < V3.1.5
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem < V1.1.1
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP V3.1.0 – < V3.1.5

Referencias y parches

CVE recientes del mismo producto — Linux kernel

Sin puntuación
CVE-2026-99285

netfilter: nft_byteorder: remove multi-register support

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_byteorder: remove multi-register support 64bit byteorder conversion is broken when several registers need to be converted because the source register array advances in steps …

Sin puntuación
CVE-2026-99284

net: skbuff: propagate shared-frag marker in skb_zerocopy()

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker in skb_zerocopy() skb_zerocopy() moves frag descriptors from @from into @to and takes a reference on each frag, but it does not copy skb_shinfo(fro…

Sin puntuación
CVE-2026-99279

ksmbd: reclaim ended sessions on logoff and expiration

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reclaim ended sessions on logoff and expiration LOGOFF and previous-session replacement leave sessions Expired with a zero credential expiry. Ended sessions can retain their memory a…

Sin puntuación
CVE-2026-99282

net/sched: sch_teql: fix use-after-free on lower qdisc drop

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: fix use-after-free on lower qdisc drop The issue: teql_master_xmit() tests the slave's ndo_start_xmit() return value against NETDEV_TX_OK alone. A slave that consumes t…