NetSight
IP …
medium5.5

CVE-2024-36903

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in __ip6_make_skb() As it was done in commit fc1092…

Impact

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in __ip6_make_skb() As it was done in commit fc1092f51567 ("ipv4: Fix uninit-value access in __ip_make_skb()") for IPv4, check FLOWI_FLAG_KNOWN_NH on fl6->flowi6_flags instead of testing HDRINCL on the socket to avoid a race condition which causes uninit-value access.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.14.313 before 4.15
from 4.19.281 before 4.20
from 5.4.241 before 5.5
from 5.10.178 before 5.11
from 5.15.107 before 5.16
from 6.1.24 before 6.2

Weakness classification

CWE-908

References