NetSight
IP …
high8.1

CVE-2024-44986

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in ip6_finish_output2() If skb_expand_head() returns NULL, skb has b…

Impact

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in ip6_finish_output2() If skb_expand_head() returns NULL, skb has been freed and associated dst/idev could also have been freed. We need to hold rcu_read_lock() to make sure the dst and associated idev are alive.

Affected products

VendorProductAffected versions
DebianDebian Linux
Version 11.0
LinuxLinux Kernel
from 5.4.137 before 5.4.289
from 5.10.55 before 5.10.233
from 5.13.7 before 5.15.166
from 5.16 before 6.1.107
from 6.2 before 6.6.48
from 6.7 before 6.10.7

Weakness classification

CWE-416

References