NetSight
IP …
medium5.5

CVE-2024-27025

In the Linux kernel, the following vulnerability has been resolved: nbd: null check for nla_nest_start nla_nest_start() may fail and return NULL.

Impact

In the Linux kernel, the following vulnerability has been resolved: nbd: null check for nla_nest_start nla_nest_start() may fail and return NULL. Insert a check and set errno based on other call sites within the same source code.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.12 before 5.4.273
from 5.5 before 5.10.214
from 5.11 before 5.15.153
from 5.16 before 6.1.83
from 6.2 before 6.6.23
from 6.7 before 6.7.11
DebianDebian Linux
Version 10.0

Weakness classification

CWE-476

References