NetSight
IP …
medium5.5

CVE-2024-26679

In the Linux kernel, the following vulnerability has been resolved: inet: read sk->sk_family once in inet_recv_error() inet_recv_error() is called without hold…

Impact

In the Linux kernel, the following vulnerability has been resolved: inet: read sk->sk_family once in inet_recv_error() inet_recv_error() is called without holding the socket lock. IPv6 socket could mutate to IPv4 with IPV6_ADDRFORM socket option and trigger a KCSAN warning.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.18 before 4.19.307
from 4.20 before 5.4.269
from 5.5 before 5.10.210
from 5.11 before 5.15.149
from 5.16 before 6.1.78
from 6.2 before 6.6.17
DebianDebian Linux
Version 10.0

Weakness classification

CWE-667

References