NetSight
IP …
high7.8

CVE-2024-26950

In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The previous commit fixed a b…

Impact

In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: access device through ctx instead of peer The previous commit fixed a bug that led to a NULL peer->device being dereferenced. It's actually easier and faster performance-wise to instead get the device from ctx->wg. This semantically makes more sense too, since ctx->wg->peer_allowedips.seq is compared with ctx->allowedips_seq, basing them both in ctx. This also acts as a defence in depth provision against freed peers.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.6 before 5.10.215
from 5.11 before 5.15.154
from 5.16 before 6.1.84
from 6.2 before 6.6.24
from 6.7 before 6.7.12
from 6.8 before 6.8.3
DebianDebian Linux
Version 10.0

Weakness classification

CWE-476

References